Keres

This machine will put Athena out of service

E45M1 - I Deluxe - Mobo - from Martin McCourt - what a guy.

• AMD

• centos 7

Todo

• OS
• firewalld - kicked out , not good logging features, so now have iptables back in and firewalld disabled.

• Wifi
• services
  • web
    • wiki
    • cacti
      • hosts: esx freenas fortigate
  • snmp
  • mysql
  • dns
    • mostly done, need to swap on the FW.
  • ntp - done, swing over services.
• acpi
• Local monitoring
• rancid:
  • rancid installed : done
  • fortigate (http://thedonkeyland.com/blog/2011/07/backing-up-fortinet-fortigate-configs-with-rancid/)
  • CVSROOT=/home/rancid/var/rancid/CVS
  • one module: firewall ( /home/rancid/var/rancid/firewall )
• snmp
• acpi

Done

• nfs setup / data exported

athena -> keres data sync

time /usr/bin/rsync -avzr /etc/ /mnt/keres/data/athena/etc --stats
time /usr/bin/rsync -avzr /var/bind/ /mnt/keres/data/athena/var/bind --stats

Firewalld

OLD: disabled, firewalld needs more work before I'll use it . (No default deny log rules : d'uh )

[root@keres etc]# firewall-cmd --permanent --zone=public --add-service=dns
success
[root@keres etc]# firewall-cmd --permanent --zone=public --add-service=https
success
[root@keres etc]# firewall-cmd --permanent --zone=public --add-service=nfs
success
[root@keres etc]# firewall-cmd --permanent --zone=public --add-service=ntp
success
[root@keres etc]# firewall-cmd --reload
success
[root@keres etc]#  firewall-cmd --zone=public --list-all
public (default, active)
  interfaces: enp3s0 wlp2s0
  sources:
  services: dhcpv6-client dns https nfs ntp ssh
  ports:
  masquerade: no
  forward-ports:
  icmp-blocks:
  rich rules:

[root@keres etc]#

Software outside of RPM

• mediawiki - source install.

See Also

• /lshw
• /lspci
• Centos 7