[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] Installing SSH2, IPChains, Portsentry, Logcheck, Tripwire, Chkrootkit, Lionfind, Whois, lcap and more


yep and I just got another one to fix.... ok this was really good before
outlook crashed....

I was going to post this and this seems a good enough place

the logrotaion on the Raq4 is messed up for high traffic sites....
logrotate splits the logs and rotates the accessfile and then the sites file
so if a site makes a large "web.log" file during the it gets rotated too....
and webalizer has nothing to work with
As far as I can see, this webalizer/logrotation problem affects the RaQ2 and RaQ3 as well. 


if you
mv /etc/logrotate.d/apache /etc/logrotate.d/zapache

then the sites rotate, the logs split, apache rotates and webalizer has
data....

you need to do this in onboot too and the catch is that stats are not
gennerated for a day....
this should be done on new boxes... on old boxes you need to have a "alizer"
and "webalizer" for a day or two to save all stats

(I explained this better last time but I'm rushing)
I think a step-by-step guide would be useful for many users. I'm not quite sure what you're mean about the "alizer" and "webalizer". 




> No/bad config? Portsentry comes with default configurations set that
> most users won't need to change, unless they want to go to 'anal'
> mode, or switch things to send to ipchains. For the average user,
> there is no config necessary.

no they need to turn on routing, or ipchains, or whatever.   and they need
to remove port 143
at a minimun
Why do you need to remove port 143? This is IMAP isn't it? If you are running in advanced TCP mode, do you need to turn it off? 

Regards,

Glen


-----------------------------------------------------
  Design Solution Limited
  t: +44 (0)1502 513008
  f: +44 (0)1502 588622
  e: info@xxxxxxxxxxxxxxxxxxxx
  w: http://www.designsolution.co.uk
  Nouvotech House, Harbour Road,
  Oulton Broad, Suffolk, NR32 3LZ, UK
-----------------------------------------------------
Graphic Design - Web development - Hosting
-----------------------------------------------------