Weekly administration (adrian's home)

Out with Tony and our friend Geoff from Toronto who's up for a few days, and sitting around last night, figured out that the MP3 Search Engine isn't quite working right. The indexer that trolls the hard drive and puts all the songs into a MySQL database wasn't indexing duplicate songs that had the same filename. So, it turns out that I had about 200 songs (~800MB) that I'd never seen, because they don't show up when you perform a search. Fixed the indexer, and cleaned up most of the duplicates. :)

Added "nobody" to the "webdev" group, and stripped "all" permissions from .php files so that the web server can still parse them, and "webdev" members can still update them, but random system users can't read them to get passwords, and other goodies. Wrote /usr/bin/setwebperms. This actually removes "public" access to files and directories that it's pointed at, including, but not limited to, .html, .cgi, .shtml, and any other files that might contain server-side code that you don't want visible. I've always thought that this was a good idea. People should only be able to see these files via the webserver.

Still haven't gotten around to fixing the global muttrc file on enfusion-group.com, but as Tony pointed out, if you've got an account, and you use mutt, you've probably got your own .muttrc that you carry around with you.

wolverine now uses iptables, including --limit options to try and sidestep some common DoS problems, including log traffic trashing the system. It now has no open ports when port scanned, and only responds to ICMP packets of various types.

3 Mbit DSL from istop.com is coming on May 7th, 2001. Woohoo! 3 Static IP's, 10Gbit/month, and free range to run servers. Be nice to get rid of Rogers@Home!

Weekly administration

TrackBack

Post a comment

Search

About