>> we nearly lost all of our data since our last backup (it was only a few days, but an important few)
Daily backups !
general recomendations:
quality server (Dell/HP/etc) NO ide drives! SCSI in software raid5 minimum software install (e.g. no compilers)
get second 'devel' server to test/compile software before using on production server If it is not broken, don't fix it. as in screw with the devel server.
Realize you are in over your head and use an existing datacenter.
They have already done all the things you have done, all the things you are realizing you forgot, and all the things you will not find out about until everything fails.
You can now move on with you core business, whatever it may be.
quick options 1: use two providers
you get to keep your address
you have redundancy
2: hire someone that has done this before
long solution: get your own address from arin or suitable authority. with 90 companies connected, getting a/20,/19, or/18 should not be a problem
bring up second connection. establish BGP sessions with both providors announcing all (old and new) ip addresses.
plan on transitioning a few customers per day. I imagine most of your customers are 9-5ers. They are easy. Save the more critical ones to last as you'll have had a lot of practice.
Using DHCP on their side helps
Co-ordinate with the companies IT person. You update the routers/routes, and they update the DHCP server. Easiest done as they leave for the day.
do not do NAT in the routers. It will kill your performance.
The whole transition could take up to two or three months. Don't get in a hurry. Do it right the first time.
Setup DNS servers on both old and new ip address blocks.
Consider keeping the old connection (maybe at a lower bandwidth) for redundancy. or kill old provider connection.
If you state that all of you are: a) getting your own cubicle b) sharing a cubical c) getting you own office d) getting a shared office
most likely nobody will like the decesion.
If instead you gather everyone together and say, "Hey, since we are moving we have a choice of how we arange the office. What would you like?"
Letting the developers/sysadmin/etc people have more control over their environment will generate a better atmosphere overall. Which leads to better productivity. I forgot where this came from, but it isn't my original idea.
If they want a 'bull pit', then give 'em a bull pit. If they want individual cubicals, then give 'em that. Maybe a combination, some one way, others the other.
all versions previous to 4.1.2 are at risk
on
PHP Security & Exploit
·
· Score: 3, Informative
All versions previous to 4.1.2 (today's release) are at risk
http://www.php.net/ http://security.e-matters.d e/advisories/012002.htm l
The bug report is here: http://bugs.php.net/bug.php?id=15736
it recomends turning off file uploads as a work around
SCO:
4. Open UNIX 8.0.0
4.1 Location of Fixed Binaries
ftp://stage.caldera.com/pub/security/openunix/CS SA -2002-SCO.4/
RedHat:
1. Topic:
Updated ucd-snmp packages are now available for Red Hat Linux 6.2, 7, 7.1,
and 7.2.
Sun:
4. List of Patches
The following patches are in the process of being propagated to the worldwide SunSolve sites and should be available in the very near future:
If the electrician is running wire anyway. ask him to run the cat5 also. have him run the phones and cat5 to 2 or 4 port faceplates. If there is a jack, there is a phone and ethernet both. run all the cat5 to a patch panel. Running cable is fun... for an hour or so. Let the expert do it and save yourself some grief.
Get O'reilly's "Linux in a netshell" book. This is exactly why I got my first one, and my second one (3rd edition).
There is a section on "linux commands", along with smaller sections on bash,csh/tcsh. A section on emacs and a section on vi. Plus sections on sed and awk.
It is a very nice "quick reference manual" for those times when you need to know what the '-M' option to rdist does.
Dell poweredge servers can do this. You initally need a keyboard and monitor to change a BIOS setting to use the serial port. After that you can manage it from a console ala cisco gear or sparc. You'll need to setup lilo to tell it to use the serial port and also setup a getty on the serial port.
This is _exactly_ what you want. and it has 3, that is three, built in eithernet ports.
http://www.embsd.org
http://www.embsd.org/order.html
Specifications:
* 133 Mhz. AMD ElanSC520 (486DX)
* 32 or 64 Mbyte SDRAM, soldered on board
* 1-4 Mbit BIOS/BOOT Flash
* CompactFLASH Type I/II socket, 8 Mbyte FLASH to 1Gbyte IBM Microdrive
* 3 10/100 mbit Ethernet ports, RJ-45
* 1 Serial port, DB9.
* Power LED, Activity LED, Extra LED(software programable)
* MiniPCI type III socket. (for optional hardware encryption?)
* PCI Slot, right angle 3.3V only. (for optional WAN board or more ethernet interfaces or maybe a HDD?)
* Board size 5.5" x 5.5"
* Power either 5V DC fixed or 6-20V DC, max 8W
* Operating temperature 0-60 C
I have looked but haven't seen anything. I got my OS X monday. ( I ordered it a month ago). So far it is _very_ cool.
[chrismcc@wednesday chrismcc]$ telnet mac
Trying 192.168.91.6...
Connected to mac
Escape character is '^]'.
Darwin/BSD (localhost) (ttyp2)
login: chrismcc
Password:
Welcome to Darwin!
[localhost:~] chrismcc%
[localhost:~] chrismcc% hostinfo
Mach kernel version:
Darwin Kernel Version 1.3:
Thu Mar 1 06:56:40 PST 2001; root:xnu/xnu-123.5.obj~1/RELEASE_PPC
Kernel configured for up to 2 processors.
1 processor is physically available.
Processor type: ppc7400 (PowerPC 7400)
Processor active: 0
Primary memory available: 256.00 megabytes.
Default processor set: 43 tasks, 118 threads, 1 processors
Load average: 0.03, Mach factor: 0.97
[localhost:~] chrismcc% cc -v
Reading specs from/usr/libexec/gcc/darwin/ppc/2.95.2/specs
Apple Computer, Inc. version gcc-926, based on gcc version 2.95.2 19991024 (release)
>I nuked my server with rpm -Uvh --nodep --force with libc6 and the 2.2 kernel. Oops. Maybe I should play around with apt-get... or is mv //dev/null a better solution for me.
If you had to use --force and --nodeps, you did something wrong.
To update glibc and the kernel this would be the procedure:
download the rpms
read some release notes.
rpm -Uvh glibc-common-... glibc-devel-... glibc-2...i686.rpm
(if you are on a PII or up)
For the kernel itself: NEVER do a --freshen or --upgrade
>> we nearly lost all of our data since our last backup (it was only a few days, but an important few)
Daily backups !
general recomendations:
quality server (Dell/HP/etc)
NO ide drives!
SCSI in software raid5
minimum software install (e.g. no compilers)
get second 'devel' server to test/compile software before using on production server
If it is not broken, don't fix it. as in screw with the devel server.
Hello...
I have asked several transit providers here in the USA about providing IPv6. The answer, "Nobody is asking for it".
The Tier 1 and Tier 2 ISPs will not provide IPv6 until there is a market for it.
The solution? Ask for native IPv6 (not tunnels) from your ISP. If you switch ISPs ask for IPv6 in the RFP.
Realize you are in over your head and use an existing datacenter.
They have already done all the things you have done, all the things you are realizing you forgot, and all the things you will not find out about until everything fails.
You can now move on with you core business, whatever it may be.
> HotNeedleOfInquiry wrote:
> I have another suggestion...
> Go home and stay there.
So... are you a native american?
Do'h
Try again with html
Better Links
IE Sucks
Mozilla Rules
Better Links
I E+ Sucks+because+pop+ups+SUCK
M oz illa+has+options+to+turn+off+pop+ups+YEA!
http://www.anti-leech.com/at_block.php?message=
http://www.anti-leech.com/at_block.php?message=
> the latter mainly coming from the MCSEs.
You know of course, MCSE stands for:
Must Call Someone Experienced
Hello...
/20, /19, or /18 should not be a problem
I've done this. It isn't fun, but it's doable.
quick options
1: use two providers
you get to keep your address
you have redundancy
2: hire someone that has done this before
long solution:
get your own address from arin or suitable authority. with 90 companies connected, getting a
bring up second connection. establish BGP sessions with both providors announcing all (old and new) ip addresses.
plan on transitioning a few customers per day. I imagine most of your customers are 9-5ers. They are easy. Save the more critical ones to last as you'll have had a lot of practice.
Using DHCP on their side helps
Co-ordinate with the companies IT person. You update the routers/routes, and they update the DHCP server. Easiest done as they leave for the day.
do not do NAT in the routers. It will kill your performance.
The whole transition could take up to two or three months. Don't get in a hurry. Do it right the first time.
Setup DNS servers on both old and new ip address blocks.
Consider keeping the old connection (maybe at a lower bandwidth) for redundancy. or kill old provider connection.
what's wrong with dig?
dig +trace www.slashdot.org
Post aborted
Reason: Please use fewer 'junk' characters.
:(
... try it yourself
If you state that all of you are:
a) getting your own cubicle
b) sharing a cubical
c) getting you own office
d) getting a shared office
most likely nobody will like the decesion.
If instead you gather everyone together and say,
"Hey, since we are moving we have a choice of how we arange the office. What would you like?"
Letting the developers/sysadmin/etc people have more control over their environment will generate a better atmosphere overall. Which leads to better productivity. I forgot where this came from, but it isn't my original idea.
If they want a 'bull pit', then give 'em a bull pit. If they want individual cubicals, then give 'em that. Maybe a combination, some one way, others the other.
All versions previous to 4.1.2 (today's release) are at risk
d e/advisories/012002.htm l
http://www.php.net/
http://security.e-matters.
The bug report is here:
http://bugs.php.net/bug.php?id=15736
it recomends turning off file uploads as a work around
culled from bugtraq posts:
S SA -2002-SCO.4/
SCO:
4. Open UNIX 8.0.0
4.1 Location of Fixed Binaries
ftp://stage.caldera.com/pub/security/openunix/C
RedHat:
1. Topic:
Updated ucd-snmp packages are now available for Red Hat Linux 6.2, 7, 7.1,
and 7.2.
Sun:
4. List of Patches
The following patches are in the process of being propagated to the worldwide SunSolve sites and should be available in the very near future:
I'm sure others are following suit
( I hope I get the html right)
e _id=32
:)
/Disclaimer
http://www.pricegrabber.com
Home > Computers > Notebooks & Accessories > Batteries & Adapters
http://www.pricegrabber.com/search_attrib.php/pag
DONE, as a bonus, you get the cheepest price
Disclaimer
I work at pricegrabber
Orange County is a ... county, NOT a suburb.
There is the City of Los Angeles, and there is the County of Los Angeles.
Orange County is next to the County of Los Angeles, but it is NOT a suburb of the City of Los Angeles.
I live in Orange County and it takes me an hour and a half to get to LA...
Oh, did I mention that Orange County is NOT a suburb of the City of Los Angeles.
I like this better:
MCSE = Must Call Someone Experienced
Hello...
... for an hour or so. Let the expert do it and save yourself some grief.
If the electrician is running wire anyway. ask him to run the cat5 also. have him run the phones and cat5 to 2 or 4 port faceplates. If there is a jack, there is a phone and ethernet both. run all the cat5 to a patch panel. Running cable is fun
There is a RH bugzilla for this:i d=51851
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?
IIRC, cipe won't talk to my cisco boxen.
Hello...
Get O'reilly's "Linux in a netshell" book. This is exactly why I got my first one, and my second one (3rd edition).
There is a section on "linux commands", along with smaller sections on bash,csh/tcsh. A section on emacs and a section on vi. Plus sections on sed and awk.
It is a very nice "quick reference manual" for those times when you need to know what the '-M' option to rdist does.
Hello...
Dell poweredge servers can do this. You initally need a keyboard and monitor to change a BIOS setting to use the serial port. After that you can manage it from a console ala cisco gear or sparc. You'll need to setup lilo to tell it to use the serial port and also setup a getty on the serial port.
Hello...
This is _exactly_ what you want. and it has 3, that is three, built in eithernet ports.
http://www.embsd.org
http://www.embsd.org/order.html
Specifications:
* 133 Mhz. AMD ElanSC520 (486DX)
* 32 or 64 Mbyte SDRAM, soldered on board
* 1-4 Mbit BIOS/BOOT Flash
* CompactFLASH Type I/II socket, 8 Mbyte FLASH to 1Gbyte IBM Microdrive
* 3 10/100 mbit Ethernet ports, RJ-45
* 1 Serial port, DB9.
* Power LED, Activity LED, Extra LED(software programable)
* MiniPCI type III socket. (for optional hardware encryption?)
* PCI Slot, right angle 3.3V only. (for optional WAN board or more ethernet interfaces or maybe a HDD?)
* Board size 5.5" x 5.5"
* Power either 5V DC fixed or 6-20V DC, max 8W
* Operating temperature 0-60 C
>> MS can "prove" their code internally when hacked (back ups/ownership/check digits) and is liable if they produce rooted code.
Really? have you read the licence ?
>> In a corporate world liability = responsiblity.
Please sue microsoft for a loss you had using their software.
I don't think you will get far. Neither MS software nor any OSS software comes with a 'you can sue me if' clause
This is where to get it:
The Art of the Matrix
Hello...
/usr/libexec/gcc/darwin/ppc/2.95.2/specs
Is there a cvs ports tree ala {Free,Net,Open}BSD?
I have looked but haven't seen anything. I got my OS X monday. ( I ordered it a month ago). So far it is _very_ cool.
[chrismcc@wednesday chrismcc]$ telnet mac
Trying 192.168.91.6...
Connected to mac
Escape character is '^]'.
Darwin/BSD (localhost) (ttyp2)
login: chrismcc
Password:
Welcome to Darwin!
[localhost:~] chrismcc%
[localhost:~] chrismcc% hostinfo
Mach kernel version:
Darwin Kernel Version 1.3:
Thu Mar 1 06:56:40 PST 2001; root:xnu/xnu-123.5.obj~1/RELEASE_PPC
Kernel configured for up to 2 processors.
1 processor is physically available.
Processor type: ppc7400 (PowerPC 7400)
Processor active: 0
Primary memory available: 256.00 megabytes.
Default processor set: 43 tasks, 118 threads, 1 processors
Load average: 0.03, Mach factor: 0.97
[localhost:~] chrismcc% cc -v
Reading specs from
Apple Computer, Inc. version gcc-926, based on gcc version 2.95.2 19991024 (release)
Like I stated: _Very_ cool
>I nuked my server with rpm -Uvh --nodep --force with libc6 and the 2.2 kernel. Oops. Maybe I should play around with apt-get... or is mv / /dev/null a better solution for me.
If you had to use --force and --nodeps, you did something wrong.
To update glibc and the kernel this would be the procedure:
download the rpms
read some release notes.
rpm -Uvh glibc-common-... glibc-devel-... glibc-2...i686.rpm
(if you are on a PII or up)
For the kernel itself: NEVER do a --freshen or --upgrade
rpm -Fvh kernel-utils.. kernel-source... kernel-pcmcia... kernel-headers...
rpm -ivh kernel-2.4.1-0.1.9.i686.rpm
This way you have two kernels installed! "just in case (tm)"
If you have scsi, make your initrd
update lilo and run 'lilo'
> and did 'for i in *rpm; do rpm -Fvh $i; done;'
Try rpm -Fvh *rpm .
That will upgrade all of them in the proper order at the same time.