Little RAID (mirror) and file server help....

I don't use SSH (I'm a GUI man!). I will double check the NAT security though. I have loopback enabled so will test the firewall. Ideally I don't want the firewall running as last time it gave me problems, especially when it came round to the mailserver.
 
Nefarious said:
I will say one thing about the network security that you've got - NAT isn't enough. I had a linux box and didn't bother overly with security but didn't allow samba and had a complex password. Woke up one morning to find that it had been accessed via SSH and all the passwords changed - was a nightmare to fix. I was behind NAT, firewall AND had a dynamic I.P. address. Set your SSH port (if you run an SSH server) to something other than 22, it stops the automated scripts that packet kiddies seem to use from finding you so easily.

Don't give root permissions over samba - it's just a question of setting your directory masks properly. A code of 777 gives full permission to all users and groups. A quick chmod and/or chown of anything else to the relevant code is a lot easier than having to completely reinstall a system thats been rootkitted.
Click to expand...

how did they get around your firewall, nat etc??
 
How did you get on with the RAID in the end?

What you basically need to do is

1) change the fs type to Linux Raid auto on both of your disks
2) Create a RAID-1 set, leave the first disk as "missing". Therefore the array is created with one disk
3) Modify your /etc/fstab accordingly so your raid device e.g. /dev/md0 is being mounted instead of your first disk
4). Add the first disk to the array

Linux SW RAID-1 is very simple, theres no need to reload. I've done migrations from single disk to software raid-1 on many live servers without issues.

I actually did a quick blog post last month since someone else asked me about converting a live system inc /boot. You might be able to apply parts of this to get you up and running:

http://chriselliott.info/wp/?p=44

Chris :)
 
Thanks celliott. I didn't really get anywhere. I think there is an issue with the controller/drivers for that controller (VIA 6421A) - tried loads of distros - OpenSolaris, ubuntu, CentOS, fedora - all had problems . Rather than buying a SiI controller card (looking at £15), I'm saving up for an Atom 330 board, or similar. It will have gigabit too which is great as I've got a 16 port gigabit dell powerconnect 2716 under my desk and eveyone else in the house can serve wirelessly.

The moment I turn off the SATA drives, the system works flawlessly. I'm going to head back to CentOS and wait until I've re configured the system. It's quite simple as you say - now it's just about getting the hardware right. I'm hoping Intel chipsets are supported well (ICH7).

I really like OpenSolaris' gnome desktop but it's a very resource heavy distro. I can't use it with 512MB RAM (idles about 550MB) whereas all the others will only use 80-200MB - CentOS using only 80MB idling). Still, when/if I get an Atom board, I will probably use a 2GB stick.
 
Last edited:
yashiro said:
Because he was port forwarding port 22 and they cracked his username/pass.
Click to expand...

No I wasn't - no port forwarding, I have NO idea how they got passed the NAT. I've spoken to a few people very knowledgeable in these matters and even they were surprised but said it was not unknown.
 
You must log in or register to reply here.
Back
Top Bottom