Changes between Version 44 and Version 45 of SystemAdmin


Ignore:
Timestamp:
07/09/12 09:16:00 (12 years ago)
Author:
Nick Holden
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • SystemAdmin

    v44 v45  
    88
    99On the hospital side, the machines are created within the UHL server facility managed by IM&T.
    10 We currently have four VMs, visible only from within the hospital environment.
    11 
    12 Mail: System needs to be able to manage local and outgoing mail. 'smarthost' used for everything else: smtp.xuhl-tr.nhs.uk
    13 
    14 ClamAV: Put the following in cron.weekly and chmod 755:
    15 clamscan -ri --exclude-dir=^/sys\|^/proc\|^/dev / | mail -s "ClamAV Scan Results for `date +%D`" email@email.domain
    16 
    17 All UHL machines need to be able to access the internet for updates, etc. For this they need to be 'allowed by rule' through the BlueCoat firewall. This is arranged by UHL IM&T (Geoff Harrison)
     10We currently have eight VMs, visible only from within the hospital environment.
     11
     12* Standard packages: mailutils build-essential clamav htop fail2ban logwatch nagios3 chkrootkit snort
     13
     14* Mail setting 'Internet with smarthost': System needs to be able to manage local and outgoing mail. 'smarthost' used for everything else: smtp.xuhl-tr.nhs.uk
     15
     16* ClamAV: Put the following in cron.weekly and chmod 755:
     17`clamscan -ri --exclude-dir=^/sys\|^/proc\|^/dev / | mail -s "ClamAV Scan Results for `date +%D`" email@email.domain`
     18
     19* All UHL machines need to be able to access the internet for updates, etc. For this they need to be 'allowed by rule' through the BlueCoat firewall. This is arranged by UHL IM&T (Geoff Harrison)
    1820
    1921=== briccs ===
     
    2527* Hardware : Virtual machine
    2628* Software : Ubuntu 9.10
    27   * Packages: sun-java6-bin sun-java6-jdk maven2 perl openssl apache2 php webmin.deb build-essential clamav
     29  * Packages: sun-java6-bin sun-java6-jdk maven2 perl openssl apache2 php webmin.deb
    2830
    2931* Services
     
    4446* Hardware : Virtual machine
    4547* Software : Ubuntu 9.10
    46   * Packages: phpmyadmin mysql perl openssl webmin.deb build-essential clamav
     48  * Packages: phpmyadmin mysql perl openssl webmin.deb
    4749
    4850* Services
     
    6163* Hardware : Virtual machine
    6264* Software : Ubuntu 10.04
    63   * Packages: phpmyadmin mysql perl openssl webmin.deb build-essential clamav
     65  * Packages: phpmyadmin mysql perl openssl webmin.deb
    6466
    6567* Services
     
    7577* Hardware : Virtual machine
    7678* Software : Ubuntu 10.04
    77   * Packages: phpmyadmin mysql perl openssl webmin.deb build-essential clamav
     79  * Packages: phpmyadmin mysql perl openssl webmin.deb
    7880
    7981* Services
     
    8890* Hardware : Virtual machine
    8991* Software : Ubuntu 10.04
    90   * Packages: phpmyadmin mysql perl openssl webmin.deb build-essential clamav
     92  * Packages: phpmyadmin mysql perl openssl webmin.deb
    9193
    9294* Services
     
    101103* Hardware : Virtual machine
    102104* Software : Ubuntu 10.04
    103   * Packages: phpmyadmin mysql perl openssl webmin.deb build-essential clamav
     105  * Packages: phpmyadmin mysql perl openssl webmin.deb
    104106
    105107* Services
     
    115117* Hardware : Virtual machine
    116118* Software : Ubuntu 12.04
    117   * Packages: build-essential clamav htop
     119  * Packages:
    118120
    119121* Services
     
    129131* Hardware : Virtual machine
    130132* Software : Ubuntu 12.04
    131   * Packages: build-essential clamav htop
     133  * Packages:
    132134
    133135* Services
     
    297299
    298300ClamAV: Put the following in cron.weekly and chmod 755:
    299 clamscan -ri --exclude-dir=^/sys\|^/proc\|^/dev / | mail -s "ClamAV Scan Results for `date +%D`" email@email.domain
     301`clamscan -ri --exclude-dir=^/sys\|^/proc\|^/dev / | mail -s "ClamAV Scan Results for `date +%D`" email@email.domain`
    300302
    301303fail2ban
    302304* Note: If installing on a CentOS machine, fail2ban is only available from the EPEL repo: rpm -Uvh http://download.fedora.redhat.com/pub/epel/5/i386/epel-release-5-4.noarch.rpm
     305
    303306logwatch
    304307