How to guarantee Server boot up 100% ALWAYS
I have installed to one of my customer a Firewall based on Linux fedora core 8.
The firewall server is running fine. At this day, the server have been working for 9 Days. In the file: /etc/rc.d/rc.sysinit I add this lines: /sbin/fsck -y /sbin/fsck -y /sbin/fsck -y /sbin/fsck -u /sbin/fsck -y (5 times) Using this config i believe i will always get Boot up in a 99.99%. (NEVER BOOT FAILS) The hard disk is a Solid State disk. But this is NOT the point. The point is that I don't want the firewall NEVER, NEVER fail on boot. But i know -->(ONLY Will FAIL if physical damage of the Solid state disk). So, what you think? My 5 lines will do that? What you think? Note:* Do not recommend me have RAID's or other disk. (I'm trying to avoid that) |
...and I want peace on earth!
Sorry but you cannot REALLY be sure (100%) it'll never fails. I don't think that errors that cannot be recovered by the first fsck can be recovered on the second or third attempt. One check can be enough. |
i there is NEVER 100%
except for the fact that 100% of the time there is NEVER 100% ok that is out Fedora 8 ( the current fedora is 17 ) VERY BIG MISTAKE and one that people should be held CRIMINALLY LIABLE for ( yes in caps and bold ) -- think jail time fedora 8 is VERY DEAD It went END OF LIFE on 2009-01-07 Jan. 1 2009 YES 3.5 YEARS AGO there have been NO security fixes to it in 3.5 YEARS and there NEVER will be Fedora 8 will NEVER have any updates, none- NEVER every known AND FIXED security hole IS WIDE OPEN IN THE DEAD FEDORA 8 and people that install a unsupported ( and one that has been unsupported for 3+ YEARS ) should spent that amount of time IN JAIL Yes in jail !!! for something that has the BEST reputation for uptime and reliability install the NOT FREE RHEL 6.2 or the free rebuild CentOS 6.2 |
I have been using rox filer for years. Its blazing fast and gives you a desktop with shortcuts if you run it with
Code:
rox -pinboard |
Quote:
|
Quote:
|
As John VV put in such ... interesting ... fashion :), you are doing your customer a disservice and leaving yourself open to liability (through lack of due diligence) by using such an outdated system as the base for a security appliance.
You might try looking at something designed as a firewall such as pfsense which does a really good job. If you must use a regular distribution for the machine then at least use something a bit more current. While John VV's choices would not be my first pick, they are good ones that have a proven track record in a production environment, when properly maintained, and if you are already familiar with Fedora would offer an easy option. |
Interesting fashion , well yes.
but people really should never put a operating system that is 3+ years out of date and has not had security fixes added in 3+ years that is unless it IS a honeypot as to CentOS in a terminal only install on thew world facing machine it is very reliable and stable , uses SELinux And well i am used to using the red hat family of OS's there are other OS's for a outward facing server/ firewall |
Quote:
|
Device makers offer hardware based firewalls that tend to have reliable up times. Get one from an enterprise level company.
|
Quote:
But a hardware Juniper (SSG 5 or XT or something) would be far more reliable and consume less space and power. |
Quote:
|
Quote:
Beats the heck out of me :) My guess is that i had too many tabs open and hit the wrong button:D |
All times are GMT -5. The time now is 05:57 AM. |