Re: Defining ISP?

2004-09-19 Thread Russell Coker
Please write your text after the quoted text and don't quote excessively.  
This is not AOL.

On Wed, 15 Sep 2004 07:48, shift [EMAIL PROTECTED] wrote:
 Well, about the week-end, you're welcome for another one (...)

 About the install, I do almost the same. the second part is the
 optimization.
 Using an optimized distrib on an SR2200 (dual PIII 1.4GHz Tualatin-S), SCSI
 U160, I have better results on Mysql nemchmarks than with a non-optimized
 SR2300-SKU0 dual xeon 3.0 1MB L3 cache and SCSI U320!!

U160 vs U320 makes little difference if you have only one hard disk.  I have 
never seen a disk that can do more than 70MB/s sustained (and the transfer 
rates under real load are usually much lower).

Two CPUs are not necessarily faster than one.  There is overhead in locking 
data structures.  If an application is only written to use one CPU then the 
second is just dead weight.

For good test results you change one thing at a time.  Change three or more 
things at once (CPU, disk, and compilation options) and you will never know 
how much each one affected the results.

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Defining ISP?

2004-09-19 Thread Russell Coker
On Wed, 15 Sep 2004 22:59, shift [EMAIL PROTECTED] wrote:
  The idea seems still interesting to me 2 days after the week-end! ( Did
 some definitive dammage happen? :)
 I imagine an install, giving possibilities of Raid, backup, replication,
 networking etc from the start, all necessary tools and programs, in a

Software RAID, backup, and networking are needed on workstations just as badly 
as on ISP servers.  You don't need an ISP specific distribution to need that.

 compact, easy to use distribution with some ncursed ISP specific
 administration tools. Something secure, minimalistic (I like the word and
 the concept) and with some optimization possibilities.
 does-it still seem confuse? Is it une idee farfelue?

It is really handy to have GUI administration consoles at ISPs.  At the last 
ISP I ran 17 inch monitors were quite common.

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Defining ISP?

2004-09-17 Thread shift
Relecture...
Back on earth.

Let us say things are started!
There will be a lot of lists of packages, some will be prefered and
others necessary to build an ideal distributions. Packages...
What will be obvious is the impossibility to satisfy every preferences and
desiderata; some difficult choices will have to be done. Packages will be
kept and others will have to go...
If we treat this subject this way, in the best of cases, what will happen
will be fragmentation. In the worst, we will forget what could have been an
interesting question.

By using the magic Debian formula, I mean Base+dpkg, everyone can build
his/her distribution. A distribution containing the necessary and prefered
packages and composing the ideal distribution Perfectly adapted and
exactly responding to his/her actual needs. This works well and doesn't need
to be changed.
Realising a beautiful distribution is part of personal developpement,
imposing it is...is...well, can't find the right word.
So, then, what is the problem?

Defining ISP in Debian is more thinking the ISP situation widely and
ahead, trying to create the atmosphere that will permit to see how this
branch is evoluting and help to adapt to this evolution.
Building a different ISP branch (a distribution with simpler words...but
it's not so simple in fact) will not be the final purpose then, it could
just be one of the multiple consequences of a process.
Another consequence could be also the way basic ISP knowledge could be
transmitted. Where is the place where knowledge about ISP tasks is given to
newbies?
Newbie, a word generally whispered in a despising tone and defining these
poor subjects that trigger always by their questions the terrible RTFM!!!
Well, another week end again. This time it will be Farfalle et thon aux
oignons and two elegant bottles of Chablis...Is there anyone interested in
the recipe? The tunafish accompagned with oignons is delicious.

Knowldge gives wisdom, shared knowledge gives freedom...


shift

- Original Message - 
From: shift [EMAIL PROTECTED]
To: Jonathan G - Mailing Lists [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Wednesday, September 15, 2004 2:59 PM
Subject: Re: Defining ISP?



  The idea seems still interesting to me 2 days after the week-end! ( Did
 some definitive dammage happen? :)
 I imagine an install, giving possibilities of Raid, backup, replication,
 networking etc from the start, all necessary tools and programs, in a
 compact, easy to use distribution with some ncursed ISP specific
 administration tools. Something secure, minimalistic (I like the word and
 the concept) and with some optimization possibilities.
 does-it still seem confuse? Is it une idee farfelue?

 shift

 - Original Message - 
 From: Jonathan G - Mailing Lists [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Tuesday, September 14, 2004 3:39 PM
 Subject: Re: Defining ISP?


  Hi,
 
  what i used to do is install a base system and then install some of the
  package packs i've defined.
 
  For example, if what i want is install a web server with php % perl
  support i use a config file what i've defined myself which contains
this:
 
 
  apt-get install apache2-common apache2-mpm-prefork
  libapache2-mod-auth-mysql libapache2-mod-perl2 php4-common
  libmailtools-perl libhtml-format-perl bzip2 file libio-socket-ssl-perl
  ca-certificates libapache2-mod-php4 php4-mysql php4-pear
 
 
  For the rest of services exactly the same. I'v defined manually the
  whole list of packages needed for web server, ftp server, irc server,
  mail server (smtp, pop and imap), antivirus server, etc...
 
  If you can build a local mirror of you version of debian, i.e. sarge,
  you can do local network installations, and your installs will be so
fast.
 
  That work fine for me at least :)
 
  BR,
 
  jonathan
 
 
 
 
 
 
  Christian Hammers wrote:
 
   On 2004-09-14 shift wrote:
  
  Thinking maybe of a an ISP specific install. Lighter and even more
  secure. A minimalistic distribution...
  
  
   Most ISP will probably have different servers for the different
services
 and on each of them they will start with a secure base install with as few
 software installed as possible and then just install
apache/postfix/proftpd
 whatever they need and customize it.
  
   I don't see a big bonus in a special ISP distribution. A better
 integration of iptables firewalls, vlans or traffic shapers would be nice
 but that's nothing ISP specific.
  
   bye,
  
   -christian-
  
   P.S.: pbuilder is a nice tool to build minimal installations that you
 can just untar onto a new harddisk
 
 
  -- 
  To UNSUBSCRIBE, email to [EMAIL PROTECTED]
  with a subject of unsubscribe. Trouble? Contact
 [EMAIL PROTECTED]
 



 -- 
 To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 with a subject of unsubscribe. Trouble? Contact
[EMAIL PROTECTED]





-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Defining ISP?

2004-09-16 Thread Jonathan G
Well, we can start reading the following documents about how to create a 
CDD (Custom Debian Distribution):

- http://wiki.debian.net/index.cgi?CustomDebian
- http://alioth.debian.org/projects/cdd/
- 
http://people.debian.org/~tille/debian-med/talks/paper-cdd/debian-cdd.html/
- http://people.debian.org/~kalfa/cdd/debian-devel

BR,
jonathan

shift wrote:
hej J.
Me I'd like to be in it.
shift
- Original Message - 
From: Jonathan G [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, September 15, 2004 12:42 PM
Subject: Re: Defining ISP?


I would be so please with the help of the phorun to propose open a new
branch into the Debian community dedicated to ISP.
Whom of you're interested??
BR,
jonathan

shift wrote:

The idea seems still interesting to me 2 days after the week-end! ( Did
some definitive dammage happen? :)
I imagine an install, giving possibilities of Raid, backup, replication,
networking etc from the start, all necessary tools and programs, in a
compact, easy to use distribution with some ncursed ISP specific
administration tools. Something secure, minimalistic (I like the word
and
the concept) and with some optimization possibilities.
does-it still seem confuse? Is it une idee farfelue?
shift
- Original Message - 
From: Jonathan G - Mailing Lists [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, September 14, 2004 3:39 PM
Subject: Re: Defining ISP?



Hi,
what i used to do is install a base system and then install some of the
package packs i've defined.
For example, if what i want is install a web server with php % perl
support i use a config file what i've defined myself which contains
this:
apt-get install apache2-common apache2-mpm-prefork
libapache2-mod-auth-mysql libapache2-mod-perl2 php4-common
libmailtools-perl libhtml-format-perl bzip2 file libio-socket-ssl-perl
ca-certificates libapache2-mod-php4 php4-mysql php4-pear
For the rest of services exactly the same. I'v defined manually the
whole list of packages needed for web server, ftp server, irc server,
mail server (smtp, pop and imap), antivirus server, etc...
If you can build a local mirror of you version of debian, i.e. sarge,
you can do local network installations, and your installs will be so
fast.
That work fine for me at least :)
BR,
jonathan


Christian Hammers wrote:

On 2004-09-14 shift wrote:

Thinking maybe of a an ISP specific install. Lighter and even more
secure. A minimalistic distribution...

Most ISP will probably have different servers for the different
services
and on each of them they will start with a secure base install with as
few
software installed as possible and then just install
apache/postfix/proftpd
whatever they need and customize it.

I don't see a big bonus in a special ISP distribution. A better
integration of iptables firewalls, vlans or traffic shapers would be
nice
but that's nothing ISP specific.

bye,
-christian-
P.S.: pbuilder is a nice tool to build minimal installations that you
can just untar onto a new harddisk

--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact
[EMAIL PROTECTED]


--
   Jonathan Gonzalez Fernandez 
   (o  mail  : [EMAIL PROTECTED]
   //\  jabber: [EMAIL PROTECTED]
   V_/  site  : www.surestorm.com
  ::: Registered Linux User #86 :::
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact
[EMAIL PROTECTED]



--
   Jonathan Gonzalez Fernandez 
   (o  mail  : [EMAIL PROTECTED]
   //\  jabber: [EMAIL PROTECTED]
   V_/  site  : www.surestorm.com
  ::: Registered Linux User #86 :::
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


RE: Defining ISP?

2004-09-16 Thread Darrel O'Pry
Well I guess I'll try to start a discussion about what would be needed
for an ISP distribution, and present a basic primer to how I run my
systems as an example of needs or things to keep in mind developing an
ISP distribution that can meet a wide variety of needs. 


I think it might be easier to develop and maintain ISP specific
meta-packages, as Ben Lisle suggested? Would he be willing to put his
existing meta-packages on the open market for community review and
maintenance?

Meta-Packages that reflect my deployments would include:

   Qmail-MX-scanner (options for NFS, local, and qmtp delivery)
(vpopmail, djbdns, qmail-scr, qmail-scanner, spamassassin,
ClamAV)
   Qmail-mailstore-admin 
(vpopmail, mysql, qmail-src, apache-ssl, vqadmin, qmailAdmin,
qmailMrtg)   
   Qmail-POP/Imap(options for delivery from localhost or nfs)
(vpopmail, qmail-src, courier imap, imp/horde)

   listserv-exim ( exim4, mailman, majordomo, majorcool, mhonarc)
   listserv-qmail( qmail, mailman, ezmlm, majordomo, majorcool, mhonarc)

   Webserver(apache, suPHP, fastcgi, mod_perl, mod_ssl, zope/plone,
awstats, )
   
   MediaServer(icecast2, Darwin, Helix) 

   DNS-primary   (djbdns, VegaDNS, mysql)
   DNS-secondary (djbdns)

   Radius-primary   (freeRadius, DialupAdmin, mysql)
   Radius-Secondary (freeRadius, mysql)

   Admin-backup (mysql, rsnapshot, phpMyadmin, snort, mrtg, spong )



One advantage of an ISP specific branch of Debian may be a quicker
release cycle since, hopefully, it will depend on fewer packages, and
the bug squashing will be easier. The slow release cycle has been the
biggest problem for me as a systems administrator. It is difficult to
keep your product line up to date and services up to date, when you are
working with outdated packages. I finally gained enough trust in testing
and moved over most of my production servers which has alleviated this
problem, but I expect I will have it again in a year or two. 

Other expectations I would have of an ISP friendly distribution of
debian would be a cluster friendly file system layout, and a set of
shell scripts for managing users, ftp, and web accounts. Currently 
I use a layout along the lines of /var/www/domains/a/adomain.com/,
/var/www/usersite/u/username/,  /var/media/qt/a/auser,
/var/media/real/a/user

With symlinks from the users home directory ~/domains/adomain.com -
domains owned by user, ~/public_html-usersite, ~/media/real/ - real
server content dirs, ~media/Darwin/ - Darwin content dirs


I only have to provide shell access on particular servers and users can
manage data for all of their services via nfs or your shared file system
of choice. I do not have a central authentication architecture in place,
currently, just keep uids/permissions etc in line across servers via
shell scripts  ssh). I haven't clustered anything besides my mail
services yet(still trying to figure out how to best implement
everything), but I am currently looking into LVS, and looking for a good
low-budget filer/nfs setup to start-with.

I think it is something to keep in mind for allowing ISPs to have an
easy expansion path to meet growth. 

I'm sure there are people out there with better method of implementing
this, or maybe better ideas about going about this kind of work, but
this seems to work pretty well for my small ISP, but I'm relatively in
experienced at this job and kind of hack it together as I go to in
attempts to keep legacy customers happy, provide the widest possible
base of services and options, keep up with current applications, and
make an attempt at maintaining the security of my network. Any feedback,
ideas, or suggestions are greatly appreciated.

.darrel.



 -Original Message-
 From: Jonathan G [mailto:[EMAIL PROTECTED]
 Sent: Thursday, September 16, 2004 6:12 AM
 To: [EMAIL PROTECTED]
 Subject: Re: Defining ISP?
 
 Well, we can start reading the following documents about how to create
a
 CDD (Custom Debian Distribution):
 
 - http://wiki.debian.net/index.cgi?CustomDebian
 - http://alioth.debian.org/projects/cdd/
 -
 http://people.debian.org/~tille/debian-med/talks/paper-cdd/debian-
 cdd.html/
 - http://people.debian.org/~kalfa/cdd/debian-devel
 
 
 BR,
 
 jonathan
 
 
 
 shift wrote:
  hej J.
 
  Me I'd like to be in it.
 
  shift
 
 
  - Original Message -
  From: Jonathan G [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Sent: Wednesday, September 15, 2004 12:42 PM
  Subject: Re: Defining ISP?
 
 
 
 I would be so please with the help of the phorun to propose open a
new
 branch into the Debian community dedicated to ISP.
 
 Whom of you're interested??
 
 BR,
 
 jonathan
 
 
 
 
 shift wrote:
 
 
  The idea seems still interesting to me 2 days after the week-end!
 ( Did
 some definitive dammage happen? :)
 I imagine an install, giving possibilities of Raid, backup,
replication,
 networking etc from the start, all necessary tools and programs, in
a
 compact, easy to use distribution with some ncursed ISP

Re: Defining ISP?

2004-09-15 Thread shift

 The idea seems still interesting to me 2 days after the week-end! ( Did
some definitive dammage happen? :)
I imagine an install, giving possibilities of Raid, backup, replication,
networking etc from the start, all necessary tools and programs, in a
compact, easy to use distribution with some ncursed ISP specific
administration tools. Something secure, minimalistic (I like the word and
the concept) and with some optimization possibilities.
does-it still seem confuse? Is it une idee farfelue?

shift

- Original Message - 
From: Jonathan G - Mailing Lists [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, September 14, 2004 3:39 PM
Subject: Re: Defining ISP?


 Hi,

 what i used to do is install a base system and then install some of the
 package packs i've defined.

 For example, if what i want is install a web server with php % perl
 support i use a config file what i've defined myself which contains this:


 apt-get install apache2-common apache2-mpm-prefork
 libapache2-mod-auth-mysql libapache2-mod-perl2 php4-common
 libmailtools-perl libhtml-format-perl bzip2 file libio-socket-ssl-perl
 ca-certificates libapache2-mod-php4 php4-mysql php4-pear


 For the rest of services exactly the same. I'v defined manually the
 whole list of packages needed for web server, ftp server, irc server,
 mail server (smtp, pop and imap), antivirus server, etc...

 If you can build a local mirror of you version of debian, i.e. sarge,
 you can do local network installations, and your installs will be so fast.

 That work fine for me at least :)

 BR,

 jonathan






 Christian Hammers wrote:

  On 2004-09-14 shift wrote:
 
 Thinking maybe of a an ISP specific install. Lighter and even more
 secure. A minimalistic distribution...
 
 
  Most ISP will probably have different servers for the different services
and on each of them they will start with a secure base install with as few
software installed as possible and then just install apache/postfix/proftpd
whatever they need and customize it.
 
  I don't see a big bonus in a special ISP distribution. A better
integration of iptables firewalls, vlans or traffic shapers would be nice
but that's nothing ISP specific.
 
  bye,
 
  -christian-
 
  P.S.: pbuilder is a nice tool to build minimal installations that you
can just untar onto a new harddisk


 -- 
 To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 with a subject of unsubscribe. Trouble? Contact
[EMAIL PROTECTED]




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Defining ISP?

2004-09-15 Thread shift
hej J.

Me I'd like to be in it.

shift


- Original Message - 
From: Jonathan G [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, September 15, 2004 12:42 PM
Subject: Re: Defining ISP?


 I would be so please with the help of the phorun to propose open a new
 branch into the Debian community dedicated to ISP.

 Whom of you're interested??

 BR,

 jonathan




 shift wrote:

   The idea seems still interesting to me 2 days after the week-end! ( Did
  some definitive dammage happen? :)
  I imagine an install, giving possibilities of Raid, backup, replication,
  networking etc from the start, all necessary tools and programs, in a
  compact, easy to use distribution with some ncursed ISP specific
  administration tools. Something secure, minimalistic (I like the word
and
  the concept) and with some optimization possibilities.
  does-it still seem confuse? Is it une idee farfelue?
 
  shift
 
  - Original Message - 
  From: Jonathan G - Mailing Lists [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Sent: Tuesday, September 14, 2004 3:39 PM
  Subject: Re: Defining ISP?
 
 
 
 Hi,
 
 what i used to do is install a base system and then install some of the
 package packs i've defined.
 
 For example, if what i want is install a web server with php % perl
 support i use a config file what i've defined myself which contains
this:
 
 
 apt-get install apache2-common apache2-mpm-prefork
 libapache2-mod-auth-mysql libapache2-mod-perl2 php4-common
 libmailtools-perl libhtml-format-perl bzip2 file libio-socket-ssl-perl
 ca-certificates libapache2-mod-php4 php4-mysql php4-pear
 
 
 For the rest of services exactly the same. I'v defined manually the
 whole list of packages needed for web server, ftp server, irc server,
 mail server (smtp, pop and imap), antivirus server, etc...
 
 If you can build a local mirror of you version of debian, i.e. sarge,
 you can do local network installations, and your installs will be so
fast.
 
 That work fine for me at least :)
 
 BR,
 
 jonathan
 
 
 
 
 
 
 Christian Hammers wrote:
 
 
 On 2004-09-14 shift wrote:
 
 
 Thinking maybe of a an ISP specific install. Lighter and even more
 secure. A minimalistic distribution...
 
 
 Most ISP will probably have different servers for the different
services
 
  and on each of them they will start with a secure base install with as
few
  software installed as possible and then just install
apache/postfix/proftpd
  whatever they need and customize it.
 
 I don't see a big bonus in a special ISP distribution. A better
 
  integration of iptables firewalls, vlans or traffic shapers would be
nice
  but that's nothing ISP specific.
 
 bye,
 
 -christian-
 
 P.S.: pbuilder is a nice tool to build minimal installations that you
 
  can just untar onto a new harddisk
 
 
 -- 
 To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 with a subject of unsubscribe. Trouble? Contact
 
  [EMAIL PROTECTED]
 
 
 
 

 -- 
 Jonathan Gonzalez Fernandez 

 (o  mail  : [EMAIL PROTECTED]
 //\  jabber: [EMAIL PROTECTED]
 V_/  site  : www.surestorm.com

::: Registered Linux User #86 :::


 -- 
 To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 with a subject of unsubscribe. Trouble? Contact
[EMAIL PROTECTED]





-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Defining ISP?

2004-09-14 Thread Jonathan G - Mailing Lists
Hi,
what i used to do is install a base system and then install some of the 
package packs i've defined.

For example, if what i want is install a web server with php % perl 
support i use a config file what i've defined myself which contains this:

apt-get install apache2-common apache2-mpm-prefork 
libapache2-mod-auth-mysql libapache2-mod-perl2 php4-common 
libmailtools-perl libhtml-format-perl bzip2 file libio-socket-ssl-perl 
ca-certificates libapache2-mod-php4 php4-mysql php4-pear

For the rest of services exactly the same. I'v defined manually the 
whole list of packages needed for web server, ftp server, irc server, 
mail server (smtp, pop and imap), antivirus server, etc...

If you can build a local mirror of you version of debian, i.e. sarge, 
you can do local network installations, and your installs will be so fast.

That work fine for me at least :)
BR,
jonathan


Christian Hammers wrote:
On 2004-09-14 shift wrote:
Thinking maybe of a an ISP specific install. Lighter and even more
secure. A minimalistic distribution...

Most ISP will probably have different servers for the different services and on each 
of them they will start with a secure base install with as few software installed as 
possible and then just install apache/postfix/proftpd whatever they need and customize 
it.
I don't see a big bonus in a special ISP distribution. A better integration of 
iptables firewalls, vlans or traffic shapers would be nice but that's nothing ISP 
specific.
bye,
-christian-
P.S.: pbuilder is a nice tool to build minimal installations that you   can just untar onto a new harddisk

--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: Defining ISP?

2004-09-14 Thread shift
Well, it seems to be the best method. But isn't it possible to define a
general list of necessary packages used by ISPs and regroup the whole in a
minimalistic optimized distribution specificly made for ISP use? And
excluding all other packages (desktop, non-necessary libraries, windowing
etc...).
It's even possible to integrate some optimization tools (apt-build) and
automatize some installation jobs
At my actual knowledge, such a distribution doesn't exist. Should it be
interesting or is it only the remanent effects of a very good long week-end?
:)


BR

shift

- Original Message - 
From: Jonathan G - Mailing Lists [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, September 14, 2004 3:39 PM
Subject: Re: Defining ISP?


 Hi,

 what i used to do is install a base system and then install some of the
 package packs i've defined.

 For example, if what i want is install a web server with php % perl
 support i use a config file what i've defined myself which contains this:


 apt-get install apache2-common apache2-mpm-prefork
 libapache2-mod-auth-mysql libapache2-mod-perl2 php4-common
 libmailtools-perl libhtml-format-perl bzip2 file libio-socket-ssl-perl
 ca-certificates libapache2-mod-php4 php4-mysql php4-pear


 For the rest of services exactly the same. I'v defined manually the
 whole list of packages needed for web server, ftp server, irc server,
 mail server (smtp, pop and imap), antivirus server, etc...

 If you can build a local mirror of you version of debian, i.e. sarge,
 you can do local network installations, and your installs will be so fast.

 That work fine for me at least :)

 BR,

 jonathan






 Christian Hammers wrote:

  On 2004-09-14 shift wrote:
 
 Thinking maybe of a an ISP specific install. Lighter and even more
 secure. A minimalistic distribution...
 
 
  Most ISP will probably have different servers for the different services
and on each of them they will start with a secure base install with as few
software installed as possible and then just install apache/postfix/proftpd
whatever they need and customize it.
 
  I don't see a big bonus in a special ISP distribution. A better
integration of iptables firewalls, vlans or traffic shapers would be nice
but that's nothing ISP specific.
 
  bye,
 
  -christian-
 
  P.S.: pbuilder is a nice tool to build minimal installations that you
can just untar onto a new harddisk


 -- 
 To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 with a subject of unsubscribe. Trouble? Contact
[EMAIL PROTECTED]



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Defining ISP?

2004-09-14 Thread Jonathan G
yep shift, is what i've done. I've been playing with apt-get and 
apt-cache in order to discover all minimal dependencies por a serie of 
packages.

My procedure is the following:
1. NetInstall or Minimal install using CD1 from Woody
2. Minimal Config
3. Change apt-sources, changing stable for sarge
3. apt-get update
4. apt-get distro-upgrade
At this step my system is converted from 3.0 Woody to 3.1 Sarge. 
Starting from sarge now i star the installation of groups of packages.

Suppouse that i want to install in a unique box a web, smtp, pop3, 
imap4, ftp, database and dns server.

I have the same config files as servers i want to install. I have in a 
file the list of packages for server needed. From console i launch a 
batch process calling those files. In about 15' i have a whole system 
installed.

About the configuration, of course, i have done the config once and then 
i only copy files from a repository and fix some permission issues on 
files, but all documented fine.

This is my way!
BR,
jonathan

shift wrote:
Well, it seems to be the best method. But isn't it possible to define a
general list of necessary packages used by ISPs and regroup the whole in a
minimalistic optimized distribution specificly made for ISP use? And
excluding all other packages (desktop, non-necessary libraries, windowing
etc...).
It's even possible to integrate some optimization tools (apt-build) and
automatize some installation jobs
At my actual knowledge, such a distribution doesn't exist. Should it be
interesting or is it only the remanent effects of a very good long week-end?
:)
BR
shift
- Original Message - 
From: Jonathan G - Mailing Lists [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, September 14, 2004 3:39 PM
Subject: Re: Defining ISP?


Hi,
what i used to do is install a base system and then install some of the
package packs i've defined.
For example, if what i want is install a web server with php % perl
support i use a config file what i've defined myself which contains this:
apt-get install apache2-common apache2-mpm-prefork
libapache2-mod-auth-mysql libapache2-mod-perl2 php4-common
libmailtools-perl libhtml-format-perl bzip2 file libio-socket-ssl-perl
ca-certificates libapache2-mod-php4 php4-mysql php4-pear
For the rest of services exactly the same. I'v defined manually the
whole list of packages needed for web server, ftp server, irc server,
mail server (smtp, pop and imap), antivirus server, etc...
If you can build a local mirror of you version of debian, i.e. sarge,
you can do local network installations, and your installs will be so fast.
That work fine for me at least :)
BR,
jonathan


Christian Hammers wrote:

On 2004-09-14 shift wrote:

Thinking maybe of a an ISP specific install. Lighter and even more
secure. A minimalistic distribution...

Most ISP will probably have different servers for the different services
and on each of them they will start with a secure base install with as few
software installed as possible and then just install apache/postfix/proftpd
whatever they need and customize it.
I don't see a big bonus in a special ISP distribution. A better
integration of iptables firewalls, vlans or traffic shapers would be nice
but that's nothing ISP specific.
bye,
-christian-
P.S.: pbuilder is a nice tool to build minimal installations that you
can just untar onto a new harddisk
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact
[EMAIL PROTECTED]

--
   Jonathan Gonzalez Fernandez 
   (o  mail  : [EMAIL PROTECTED]
   //\  jabber: [EMAIL PROTECTED]
   V_/  site  : www.surestorm.com
  ::: Registered Linux User #86 :::
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: Defining ISP?

2004-09-14 Thread Jonathan G
About this. (comments in line)
shift wrote:

At my actual knowledge, such a distribution doesn't exist. Should it be
interesting or is it only the remanent effects of a very good long week-end?

i'm quite interested.  :)
jonathan
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: Defining ISP?

2004-09-14 Thread shift
Well, about the week-end, you're welcome for another one (...)

About the install, I do almost the same. the second part is the
optimization.
Using an optimized distrib on an SR2200 (dual PIII 1.4GHz Tualatin-S), SCSI
U160, I have better results on Mysql nemchmarks than with a non-optimized
SR2300-SKU0 dual xeon 3.0 1MB L3 cache and SCSI U320!!

- Original Message - 
From: Jonathan G [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, September 14, 2004 5:14 PM
Subject: Re: Defining ISP?


 yep shift, is what i've done. I've been playing with apt-get and
 apt-cache in order to discover all minimal dependencies por a serie of
 packages.

 My procedure is the following:

 1. NetInstall or Minimal install using CD1 from Woody
 2. Minimal Config
 3. Change apt-sources, changing stable for sarge
 3. apt-get update
 4. apt-get distro-upgrade

 At this step my system is converted from 3.0 Woody to 3.1 Sarge.
 Starting from sarge now i star the installation of groups of packages.

 Suppouse that i want to install in a unique box a web, smtp, pop3,
 imap4, ftp, database and dns server.

 I have the same config files as servers i want to install. I have in a
 file the list of packages for server needed. From console i launch a
 batch process calling those files. In about 15' i have a whole system
 installed.

 About the configuration, of course, i have done the config once and then
 i only copy files from a repository and fix some permission issues on
 files, but all documented fine.

 This is my way!

 BR,


 jonathan




 shift wrote:

  Well, it seems to be the best method. But isn't it possible to define a
  general list of necessary packages used by ISPs and regroup the whole in
a
  minimalistic optimized distribution specificly made for ISP use? And
  excluding all other packages (desktop, non-necessary libraries,
windowing
  etc...).
  It's even possible to integrate some optimization tools (apt-build) and
  automatize some installation jobs
  At my actual knowledge, such a distribution doesn't exist. Should it be
  interesting or is it only the remanent effects of a very good long
week-end?
  :)
 
 
  BR
 
  shift
 
  - Original Message - 
  From: Jonathan G - Mailing Lists [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Sent: Tuesday, September 14, 2004 3:39 PM
  Subject: Re: Defining ISP?
 
 
 
 Hi,
 
 what i used to do is install a base system and then install some of the
 package packs i've defined.
 
 For example, if what i want is install a web server with php % perl
 support i use a config file what i've defined myself which contains
this:
 
 
 apt-get install apache2-common apache2-mpm-prefork
 libapache2-mod-auth-mysql libapache2-mod-perl2 php4-common
 libmailtools-perl libhtml-format-perl bzip2 file libio-socket-ssl-perl
 ca-certificates libapache2-mod-php4 php4-mysql php4-pear
 
 
 For the rest of services exactly the same. I'v defined manually the
 whole list of packages needed for web server, ftp server, irc server,
 mail server (smtp, pop and imap), antivirus server, etc...
 
 If you can build a local mirror of you version of debian, i.e. sarge,
 you can do local network installations, and your installs will be so
fast.
 
 That work fine for me at least :)
 
 BR,
 
 jonathan
 
 
 
 
 
 
 Christian Hammers wrote:
 
 
 On 2004-09-14 shift wrote:
 
 
 Thinking maybe of a an ISP specific install. Lighter and even more
 secure. A minimalistic distribution...
 
 
 Most ISP will probably have different servers for the different
services
 
  and on each of them they will start with a secure base install with as
few
  software installed as possible and then just install
apache/postfix/proftpd
  whatever they need and customize it.
 
 I don't see a big bonus in a special ISP distribution. A better
 
  integration of iptables firewalls, vlans or traffic shapers would be
nice
  but that's nothing ISP specific.
 
 bye,
 
 -christian-
 
 P.S.: pbuilder is a nice tool to build minimal installations that you
 
  can just untar onto a new harddisk
 
 
 -- 
 To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 with a subject of unsubscribe. Trouble? Contact
 
  [EMAIL PROTECTED]
 
 
 

 -- 
 Jonathan Gonzalez Fernandez 

 (o  mail  : [EMAIL PROTECTED]
 //\  jabber: [EMAIL PROTECTED]
 V_/  site  : www.surestorm.com

::: Registered Linux User #86 :::


 -- 
 To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 with a subject of unsubscribe. Trouble? Contact
[EMAIL PROTECTED]



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Defining ISP?

2004-09-14 Thread Christian Hammers
Hello

On 2004-09-14 shift wrote:
 Using an optimized distrib on an SR2200 (dual PIII 1.4GHz Tualatin-S),
 SCSI U160, I have better results on Mysql nemchmarks than with a
 non-optimized SR2300-SKU0 dual xeon 3.0 1MB L3 cache and SCSI U320!!

Sounds very unrealistic. Are you sure that it wasn't just a question of how much 
memory was available, using a different MySQL config or chosing the right kernel so 
that the dual procs were actually detected etc?

bye,

-christian-


pgpTwzk64JGg3.pgp
Description: PGP signature


Re: Defining ISP?

2004-09-14 Thread Arnt Karlsen
On Tue, 14 Sep 2004 17:14:02 +0200, Jonathan wrote in message 
[EMAIL PROTECTED]:

  4. apt-get distro-upgrade

..you meant dist-upgrade, or is distro-upgrade different from
apt-get dist-upgrade???

-- 
..med vennlig hilsen = with Kind Regards from Arnt... ;-)
...with a number of polar bear hunters in his ancestry...
  Scenarios always come in sets of three: 
  best case, worst case, and just in case.



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Defining ISP?

2004-09-14 Thread Jonathan G
Oh no, was a typo, is dist-upgrade :) thanks for the note
BR,
jonthan

Arnt Karlsen wrote:
On Tue, 14 Sep 2004 17:14:02 +0200, Jonathan wrote in message 
[EMAIL PROTECTED]:


4. apt-get distro-upgrade

..you meant dist-upgrade, or is distro-upgrade different from
apt-get dist-upgrade???
--
   Jonathan Gonzalez Fernandez 
   (o  mail  : [EMAIL PROTECTED]
   //\  jabber: [EMAIL PROTECTED]
   V_/  site  : www.surestorm.com
  ::: Registered Linux User #86 :::
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


RE: Defining ISP?

2004-09-14 Thread Ben Lisle


 -Original Message-
 From: shift [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, 15 September 2004 4:13 AM
 To: [EMAIL PROTECTED]
 Subject: Defining ISP?
 
 
 Hej till alla
 
 Is it possible to define with some accuracy the needs of  ISPs?
 Some list of all the components in a Debian that are absolutely
necessary
 for the ISP work. Is it possible to compose a custom ISP Debian? or
custom
 ISP debians (different flavours: mail specific, routage-specific,
hosting,
 db etc...)

There are a lot of ways to go about this.  

I do a bit of research and build my own boot CD depending on hardware
requirements.  It has an update-to-date kernel with the support you need
for various bits of hardware compiled into it.  I've usually rolled my
own packages from scratch and grouped them depending on function into a
larger meta package.  An example...

I did some contracting for a service provider about 7 months ago.  One
of the main things they wanted was the ability to deploy new servers
that can conform to their standards quickly.  I had a base-conform
package that pulled down customised packages that were preconfigured
(pam, nfs, sudo and others) and removed a lot of crud it didn't need.
Depending on what the function of the machine I then did the same sort
of deal for that... so mail-server, name-server, samba-server,
radius-server, etc.  The mail-server meta package pulled down a version
of postfix with all the usual extras (clamav, amavis, spamassasin, auth
via LDAP, etc.)  The post install scripts finished off the rest of the
configuration by asking a few questions that it needed to know about.
This is a double-edged sword though... you usually take a hit in the
ease of upgrade later on.

Last I heard they have an administrator who speaks good Debian and he
works with it pretty well so it worked out well in the end.

Once you start getting larger you might want to investigate using
cfengine or something similar for large deployments and making them
conform to whatever they are meant to be doing.

 mvh
 
 shift
 
 
 --
 To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 with a subject of unsubscribe. Trouble? Contact
 [EMAIL PROTECTED]