Hello to all Linux Crackz,
I've got a big problem concerning building up a network server for a company with around (30 workers). Some facts you surely need to know about this situation:

This server (network):
- It has to save the data to tape in specified time intervals (1time per 2weeks)
- It has to handle an array of hdd, where the datas are saved on one or more hdds for one day
- Some kind of SVN (=CVS) must be installed
- It has to share printers to Windows and Linux machines (I know Samba, but is there anything better)
- It has to control the privileges of the users to access datas from the array (something like NFS and samba, but is there anything better available)
- It should be very secure that no one can access data without permission
- An ftp must also be included, but I think this is not such a big problem
- Which distribution fits best for this use?

My main question is: "Which programs do I need to realize an easy to use maintainable server?"

I'm grateful for every post which leads me further

Blacky

There is also an internet server to do:
- with a Webserver for the Homepage
- an ftp-server
- Bugreporter
- E-Mail-server for around 30 E-Mails adresses

One problem is the security because this server must be connected to the network and (!!!!) to the internet at the same time. I thought about a PC which checks for E-Mails on this server every quarter hour and then closes the connection to the server by reconfiguring the network card with scripts and then connects to the network and sends it to the specific PC. The second has the only the functionality of a tunnel (with a firewall).

The most important question: "Which distribution"

I think I've forgotten many details this concerning that anybody could help me

im not going to be a HUGE techincal help but i hope to give you some food for though.

1. distro really does not matter. pick one you are comfortable with like RHES, or WhiteBox or one of those forks, or any other distro like slack, debian, gentoo, etc..

all distros can do the same stuff, the issue is finding one that works best for you.

2. you are asking a lot to have security, FTP (major security issues there), web server, plus LAN services... you might want to consider multiple servers for this for security issues.

have 1 server that is for your FTP and e-mail and web server. that alows you to put them out on the DMZ if you want to help protect the LAN data and work stations. then put up the 2nd server inside the firewall for everything else. i have a little whitebox server running apache (web server) and qmail (e-mail server) that is protected with clamAV connecting to 4 LAN workstations and about a dozen WAN workstations.

all that server does is e-mail and web with web-mail service that only a few end users touch. this way if something happens to that box it will not comprimise the rest of the LAN and the data stored on the LAN side server.

samba and cups can handle your login, file permissions, and print sharing with little issues. you might run into some issues (search around here for win2k3 AD and samba) if you have any win2k3 AD servers running. win2k3 and samba as your kerberos do not play nice along with LDAP. you will want both kerberos and LDAP running on the linux server for the windows boxes for the security and to emulate the AD they will be looking for.

hope that helps a little bit.

It helps a lot, but i cannot believe that the distris have not such an big influence on security

Do you think that i can make every Distri as save as another one. My brother suggested me to use OpenBSD, but i haven't used it yet.

Concernig the structure of the Internet/Network relation i thought about the same and i think it's a good way to do this.

Would it be helpful to use cryptography to ensure that no one could use the data on the fileserver, if a hacker breaks through the firewall of the internet-PC.

One big factor at this point is: How long will it take to do this 2 servers?


P.S.: I'm open to every suggestion for good books concerning security and networking.

Thank you for the first reply. This means that my english is not such confusing.