Re: [cobalt-users] RaQ3 log files and system upgrades

[Cody Watkins <codyw@xxxxxxxxxxxxxxxxx>]

At 11:27 PM 7/13/2000 -0400, you wrote:
>Two questions:
>
>1) Which log files do you recommend we keep a close eye on to catch
>tampering by hackers/pranksters?

/var/log/messages
/var/log/secure
/var/log/maillog
/var/log/wtmp (using the 'last' command)
/var/log/httpd/access
/var/log/httpd/error

>We currently review the web.log each week? Any others helpful?
>
>
>
>2) BTW, we sent this question to Cobalt like a week ago and still no answer.
>
>
>Our machine has:
>Cobalt OS Release 5.0
>RaQ3-Security Release 1.2
>RaQ3-SecurityRelease 2.2
>RaQ3E-Update-OS Release 2.0
>
>Our box has only been worked on via the GUI and hosts about 20 sites, all IP
>based.

Same with my box.

>In your opinions (people who have upgraded already please) is it completely
>safe to upgrade to OS Update 3.0 and All Kernel i386 1.1?

I installed the OS Update 3.0 from the GUI with NO problems. And after the
restart, it was fine.  Then I installed the kernel patch and it installed
fine.  No problems with both of them.

>We CANNOT be down due to Cobalt hosing another software release.
>
>In other words, if we install the new software will our box break?
>

It didn't break my box, but I can't make any guarantees :^)

>3) Does the new OS Update 3.0 actually fix the "catchall" problem?

I think so.  I don't use catchall's.

>Does it fix the "site name being repeated 1 time for each month" on the GUI
>Web stats page?
>
>

Nope.  This error is getting really annoying......does anybody know if
there is a fix for it?

Sincerely,
Cody Watkins
Paradox Web Hosting
http://www.paradoxwebhosting.com