LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 12-12-2009, 12:10 PM   #1
stuaz
Member
 
Registered: Dec 2008
Posts: 59

Rep: Reputation: 15
Linux Admin Tasks


Hello,

I am kinda new to linux, I have some scripting knowledge, etc, but I have been asked to preform some Administration tasks on our Linux (Redhat, CentOS, Fedora) servers.

I have some basic crons running that email me things such as disk usage and warn me if disk space gets to low, etc.

What I need to kinda know now is things like:

Load
Hardware Failures

Etc.

I guess the more advanced stuff! I have looked at "Logwatch" which I notice I can divert to an external address. I assume this would warn me failures and such?

Do you guys use any software for monitoring and such?

Or if you think there should be anything else I should be monitoring (No websites running on these servers they are purely database servers, with user numbers in excess of 800 on some servers.)

Would appriceate the ideas

Thanks

Last edited by stuaz; 12-12-2009 at 12:11 PM.
 
Old 12-12-2009, 01:28 PM   #2
pixellany
LQ Veteran
 
Registered: Nov 2005
Location: Annapolis, MD
Distribution: Arch/XFCE
Posts: 17,802

Rep: Reputation: 738Reputation: 738Reputation: 738Reputation: 738Reputation: 738Reputation: 738Reputation: 738
You don't say exactly what you have been asked to do.....

Have you been put in charge of these servers? Is there a more senior/experienced person guiding you?
 
Old 12-12-2009, 03:04 PM   #3
btmiller
Senior Member
 
Registered: May 2004
Location: In the DC 'burbs
Distribution: Arch, Scientific Linux, Debian, Ubuntu
Posts: 4,275

Rep: Reputation: 370Reputation: 370Reputation: 370Reputation: 370
You might look into Nagios or something similar for monitoring. Depending on what type of database server you're using, it might have its own monitoring tools.
 
Old 12-12-2009, 03:10 PM   #4
stuaz
Member
 
Registered: Dec 2008
Posts: 59

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by pixellany View Post
You don't say exactly what you have been asked to do.....

Have you been put in charge of these servers? Is there a more senior/experienced person guiding you?
yeah they are all under my control
 
Old 12-12-2009, 03:12 PM   #5
stuaz
Member
 
Registered: Dec 2008
Posts: 59

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by btmiller View Post
You might look into Nagios or something similar for monitoring. Depending on what type of database server you're using, it might have its own monitoring tools.

The database part is under someone elses control and management, mine is the email server, users, printers, hardware, etc

I already do basic checks manually, and I am trying to automate things. But also making sure I am checking things I should be.

Last edited by stuaz; 12-12-2009 at 03:16 PM.
 
Old 12-12-2009, 07:54 PM   #6
AwesomeMachine
Senior Member
 
Registered: Jan 2005
Location: USA and Italy
Distribution: Debian testing/sid; OpenSuSE; Fedora
Posts: 1,835

Rep: Reputation: 260Reputation: 260Reputation: 260
The first thing is to bullet proof outside access, as much as possible. The 2.6 kernel uses iptables to build networking packet filters. You should look at /etc/hosts.allow and /etc/hosts.deny to make sure access terminates with an ALL or NONE statement. There are man pages for these files. Disable all services that you don't need. Bullet proof ssh by not allowing root logins, or remote X sessions. Run snort to monitor network intrusuion, unless it's running on a firewall somewhere.

Get a spam filter, and train it. It doesn't take long. Make sure the ports for local services are blocked to the outside world. Configure syslog to log what you want. And configure one machine to gather all syslog data remotely. Splunk is good. Make sure the program files you don't need are deleted.

You can install bastille to harden the system. If you want realtime log monitoring, for say root logins, try w | grep 'root'. If there is any output, you've got a root login. If you want monitoring for syslog for a specific thing, sudo tail -f /var/log/syslog | grep 'eth0' | 'died' | 'root' | 'sudo' will monitor syslog for the strings listed.
 
Old 12-12-2009, 07:55 PM   #7
AwesomeMachine
Senior Member
 
Registered: Jan 2005
Location: USA and Italy
Distribution: Debian testing/sid; OpenSuSE; Fedora
Posts: 1,835

Rep: Reputation: 260Reputation: 260Reputation: 260
The first thing is to bullet proof outside access, as much as possible. The 2.6 kernel uses iptables to build networking packet filters. You should look at /etc/hosts.allow and /etc/hosts.deny to make sure access terminates with an ALL or NONE statement. There are man pages for these files. Disable all services that you don't need. Bullet proof ssh by not allowing root logins, or remote X sessions. Run snort to monitor network intrusuion, unless it's running on a firewall somewhere.

Get a spam filter, and train it. It doesn't take long. Make sure the ports for local services are blocked to the outside world. Configure syslog to log what you want. And configure one machine to gather all syslog data remotely. Splunk is good. Make sure the program files you don't need are deleted.

You can install bastille to harden the system. If you want realtime log monitoring, for say root logins, try w | grep 'root'. If there is any output, you've got a root login. If you want monitoring for syslog for a specific thing, sudo tail -f /var/log/syslog | grep 'eth0' | 'died' | 'root' | 'sudo' will monitor syslog for the strings listed.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Junior linux admin role -- few questions paperbag Linux - General 28 10-17-2008 06:12 PM
2K admin now RHEL4 admin (I have some questions) wilsryan Red Hat 5 01-30-2006 01:18 PM
User admin and N/w admin on Gnome hangs ssrini *BSD 2 07-28-2005 08:55 AM
Remote admin questions... Irving Linux - Networking 7 06-22-2004 10:52 AM
Network admin questions! kobe Linux - Security 5 08-13-2002 04:26 AM


All times are GMT -5. The time now is 02:51 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration