Hey Everyone, Just wanted to relay that a new rev of the TrinityOS doc is out. This version adds NFS and a few others things. http://www.ecst.csuchico.edu/~dranch/LINUX/TrinityOS.wri -- Current Features: + Thoughts and recommendations on picking a Linux distrobution + A Search & Replace Key to customize this doc to YOUR environment for easier implimentation + Complete physical and configuration security recommendations/guidelines + Actively maintained Linux system security and patching (Shadow passwords, etc) + Advanced SYSLOG logging + Setting up, compiling, installing, and booting a 2.0.3x kernel + Lilo configuration and security + Full LAN masquerading (IP MASQ) using a private class B + Advanced packet filter firewall ruleset for MASQ and non-MASQing servers with configurable remote IP address access restrictions + Masq port forwarding support (IPportfw) + PPP connectivity to your ISP (for analog/ISDN modem users) + Dial-on-Demand (Diald) Internet connections (modem users) + Automatic Internet connections every 15 minutes (modem users) + Dual 10Mb/s Ethernet network support (3c509b) NICs (modem and cablemodem users) and network optimization + DHCP server for other LAN machines (laptops, etc) + NTP time calibrated + Full Bind v8 authoritative domain DNS and DNS caching service + Full Sendmail mail system support w/ domain masquerading + Apache WWW server + Full SSH telnet support [Future: X-windows encrypted tunnels] + Samba : Full Microsoft Windows file & printing support + NFS: Full Sun RPC-based Network File System support + Tripwire Security Breech monitoring [not completed yet] + SCSI-based TR4 tape backup via BRU with emergency restore diskette creation + Sound Blaster 16 sound support + Software RAID 0 (striping) two SCSI HDs + 7-CD SCSI CD-ROM changer system + PCMCIA PC-Card Services + Full APC SmartUPS powerdown support (APCUPSd) + Backing up the server to a CD-R [not completed yet] Future Features: - Add a CACHING only setup for 8.1.x DNS - Setup a email list server (MajorDomo, Petidomo, dunno yet) - Email sent dynamic IP address exception requests for access through the TCP Wrappers and the IPFWADM rulesets - Update the DNS setup to be a SPLIT-DNS setup for additional internal security - Impliment a new 2.1.x kernel - Migrate IPFWADM to IPCHAINS (required by the 2.1.109+ kernels) - DHCPc client setup for Cablemodems - Impliment automatic weekly incremental tape backups to the TR4 tape drive. - Update & integrate the PPP docs to reflect the new PPPD 2.3.x+ configuration method. - 128-bit encrypted Apache WWW server - BZip2 compression w/ tar patches - Move over to xinetd for better DoS protection - Iomega parallel ZIP drive support - Full SVGA X-Windows support w/ the WindowMaker window Manager (Xfree only. Metrox-X sucks) - Add hdparm optimization for IDE HDs - WWW Proxy services - WWW banner add filtering - SATAN / COPS / ISS / NMAP tested - Move this doc over to SGML format!!!!!! .----------------------------------------------------------------------------. | David A. Ranch - Remote Access/Linux/PC hardware [EMAIL PROTECTED] | !---- ----! `----- For more detailed info, see http://www.ecst.csuchico.edu/~dranch -----' --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] For daily digest info, email [EMAIL PROTECTED]
