Server Notes

From ATLASWARES

Jump to: navigation, search

The following notes contain corrections and additions to the Fedora Core 5 system installation and configuration.

  • /etc/mon/mon.cf -- Comment out the authentication command to eliminate the mon service failure during system boot
 #  auth = PAM
  • /etc/shorewall/shorewall.conf -- Setup a private Shorewall log file to move logs from the system messages file and to capture the firewall startup and shutdown messages
  LOGFILE=/var/log/shorewall
  • /etc/rc5.d/s25shorewall -- Change exec line to redirect output to private log file
 exec /sbin/shorewall $OPTIONS $@ > /var/log/shorewall
  • /etc/shorewall/policy -- Change log settings for firewall default rules to prevent logfile overflow
 loc     net     ACCEPT
 loc     $FW     ACCEPT	
 loc     all     ACCEPT     info
 $FW     net     ACCEPT	
 $FW     loc     ACCEPT	
 $FW     all     ACCEPT
 net     $FW     DROP       info
 net     loc     DROP       info
 net     all     DROP       info
 all     all     ACCEPT
  • /etc/shorewall/routestopped -- add settings for remote administration when firewall down
 eth1    216.212.48.106,216.212.48.107,216.212.48.108     routeback,source,critical
  • Create Shorewall log files from a terminal command with root privileges
 touch /var/log/shorewall
 touch /var/log/shorewall.1
 touch /var/log/shorewall.2
 touch /var/log/shorewall.3
 touch /var/log/shorewall.4