Forum Moderators: bakedjake

Message Too Old, No Replies

New Server wish list

         

apea2rh

12:06 pm on Jun 23, 2006 (gmt 0)

10+ Year Member



Hi everyone

In the process of upgrading to some nice new servers in globix, going to be centOS based. Apart from the standard things can anyone think of anything I'm missing? now's a good time to get anythign I want installed before they go production.

So far I have:

GD Library [boutell.com...]
ImageMagick [imagemagick.org...]
Gimp [gimp.org...]
Tomcat [tomcat.apache.org...]
Ming [ming.sourceforge.net...]
Mod_mono [apacheworld.org...]

Cheers

Ash

wheel

3:28 pm on Jun 27, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Gimp? On a production server? isn't gimp strictly an end user product run via a gui?

I'm not aware of anything that would need gimp installed on a server.

StupidScript

11:16 pm on Jun 27, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



It really depends on what sort of stuff you will be running (I agree that GIMP on a production server seems a bit odd), but I've always found that a fresh update of CPAN (
perl -e 'install Bundle::CPAN'
) and a flawless installation of yum/apt with a few decent, frequently updated repositories are good ideas.

Also, you'll want to make sure your security/IDS programs are up to date before you get too far in the setup process. Consider using Bastille, portsentry and hostsentry and logcheck, chkrootkit and snort, among others.

apea2rh

2:15 pm on Jun 28, 2006 (gmt 0)

10+ Year Member



Gimp sounds odd I know, we call up some of it's functions for something thats all.

Cpan bundle is on too, thanks for the other pointers I'll have a look into them. We have the servers configured behind firewalls anyway so from a security point of view they'll be tight! I've learnt the hard way in the past!

StupidScript

6:10 pm on Jun 28, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Firewalls are nice, but by themselves they do not make your system(s) secure. Don't learn another tough lesson by not securing the box as much as you can, too.

I suggested securing the box before you get too far along in the server setup because a truly tight box will need some special stuff to get some programs working properly, and you'll want to have your permissions policies in place as soon as possible so you can work out all that must be done.