Questions asking for best practices in a given field. Be aware, that sometimes there might be no generally accepted best practices, in which case the question is likely to be closed for being subjective.

learn more… | top users | synonyms

2
votes
2answers
1k views

Best practice ACLs to prepare for auditors?

An auditor will be visiting our office soon, and they will require read-only access to our data. I have already created a domain user account and placed them into a group called "Auditors". We have a ...
5
votes
2answers
163 views

Why should www.domain and mail.domain be used?

I see the default hostname for mail and web servers being set as mail.domain.tld and www.domain.tld respectively. Why is this? Does it help as you move from a single server to multiple servers? I ...
1
vote
2answers
517 views

Which is generally considered faster or best practice: symlinks or Apache aliases?

I'm curious as to what most people's views are on this subject. Personally, I will almost always prefer symlinks unless I have no other option -- I find that it is far more obvious when someone is ...
0
votes
2answers
1k views

What are industry standards and professional best practices in network hosts naming? [duplicate]

Possible Duplicate: Naming convention for computers It seems an important and difficult dilemma for me how to name network hosts (routers, servers (while a server can be a router and host ...
2
votes
4answers
757 views

Best practice for ONLY allowing MySQL access to a server?

Here's the use case: I have a SaaS system that was built (dev environment) on a single box. I've moved everything to a cloud environment running Ubuntu 10.10. One server runs the application, the ...
3
votes
1answer
4k views

Best Practice: iDRAC & NIC Selection

I am setting up a new Dell server with iDRAC 6 Express. My options for the NIC are: 1) Shared 2) Shared with failover to LOM2 3) Shared with failover to all LOMs The server has 4x LOMs. My ...
1
vote
2answers
211 views

datacenter network change control best practices

I have been tasked with compiling a list of possible network equipment changes at a data center. The task includes tagging which changes need change control and which don't. Does anyone know of a ...
8
votes
1answer
887 views

Best practice for Exchange 2010 HA topology considering 6 x Exchange licenses and TMG 2010

What would be best topology considering that: 6 x Exchange 2010 Standard Licenses 2 x Separate locations that are supposed to support redundancy in case of link problems 4 x Forefront TMG 2010 with ...
3
votes
3answers
237 views

New Server hardware verification tests

Is there any kind of best practice when it comes to verifying the hardware of a new server, before putting it into production? For instance, running it through the manufacturer's hardware test, or ...
1
vote
4answers
315 views

Plugging Surge Protectors into UPS [duplicate]

Possible Duplicate: UPS and power strip interactions? I have heard that plugging a server into a surge protector (cheapo power strip) is not good. Is this accurate? For instance: Server ...
1
vote
3answers
706 views

Setup Postfix as a null client?

I'm having a bit of trouble setting up postfix as a null client and have some questions. I'll be aiming to use SMTP as this is what most web applications use as a way to connect to the email server. ...
3
votes
2answers
176 views

IT Considerations for a company name change

Nothing is "for sure" yet but there is a good chance my company will be changing it's name in the future. Our IT requirements are relatively modest - Exchange server, IIS, MSSQL, etc. My question ...
0
votes
5answers
727 views

Reserve Web Server - How to synchronize them almost in real time [closed]

Maybe my question is a little bit stupid, but idea is to have a reserve web server, which will be activated WHEN main web server becomes inactive (DDos, or any other incident). Please name common ...
1
vote
4answers
419 views

Editing root-writable files with only sudo rights

Our sysadmins login to boxes using unprivileged accounts with sudo rights. I often, out of habit, open files in vim instead of sudoedit. I do not want to get into the habit of using sudoedit. My ...
7
votes
4answers
21k views

How do you diagnose packet loss?

I realise this is very subjective and dependent on a number of variables, but I'm wondering what steps most folks go through when they need to diagnose packet loss on a given system?
1
vote
2answers
547 views

Best way to physically trace and document your network cabling and equipment

I am starting my network inventory and I would like to minimized wasted time and do a good work for me and for people coming after me. It's a 4 floor building and there is no documentation about ...
0
votes
5answers
204 views

How to detect weak points in my lan

I am starting to "polish" the LAN here at my new work and since it's the 1st time I face sommething that big (almost 300 clients a switches, proxy) I would like to understand easily where I get weak ...
3
votes
2answers
519 views

Best Practices for Webserver Benchmarking

I have a webserver that I wish to benchmark before I make some optimizations to it to see if they have any effect. However, I want to know what are the best practices for benchmarking? For example, ...
0
votes
5answers
329 views

Setting up DNS records for a shared host

So I'm setting up this server right now that'll host multiple websites / domains. What are the current best practices with regard to DNS records? I admit to 'just having done something' up to now, ...
-4
votes
3answers
485 views

IPv6 is comming [closed]

Very soon, all of us will face one of the greatest changes in the global network in last 30 years: moving to the IPv6. So many system administrators will have to decide, how to handle this problem: ...
3
votes
3answers
96 views

Compiling and maintaining applications?

What configure format do you use for compiling and why ? Example (you don't have to reply as the example but do state your directory setup): <Layout MyPersonalizedLayout> prefix: ...
6
votes
6answers
5k views

Daily/Weekly/Monthly/Annual Sysadmin Tasks

This should probably be community wiki. I'm trying to come up with a list of all the sysadmin tasks that we should be doing on a regular basis because I believe we're not doing enough at our company. ...
17
votes
1answer
1k views

How to correctly move a server inside a rack up and down

Maybe a bit stupid question, but Sometimes (rarely but it happens) I need to move a server in a rack 1-2U up or down. What do you think, which of the ways is the most correct and useful and why? ...
2
votes
2answers
405 views

Statistics for iptable best pratices?

Looking for statistics on IPtable best pratices - appears that a server like www.cloudflare.com would parse iptables and look for gaps and trends in iptable configs - but don't think they'd publish ...
0
votes
4answers
1k views

Windows Server 2003 DNS: What is the purpose of Forward Lookup Zones?

What is the purpose of Forward Lookup Zones? I have a domain abc.com setup in DNS as a forward lookup zone. Now I want to add a new domain xyz.com to my DNS. I looks like I can either create a new ...
5
votes
3answers
479 views

Management Network Best Practices

I am looking at setting up a Management vlan, on which I will put all the Management interfaces for my various networkable devices (Firewall Mgmt Interfaces, Server RAC, WAP Mgmt Interfaces, etc). ...
11
votes
5answers
16k views

A secure, standard iptables rule-set for a basic HTTP(s) webserver

I have been trying to put together a basic server iptables script that will work for most sites just running a basic webserver using HTTP(S) and SSH (ports 80, 443, & 22). After all, most VPS only ...
-1
votes
3answers
197 views

Why are we constantly told, “There's a disk space issue”? [closed]

This morning, I was helping a BA with a particularly complicated report. I notice that in the reporting Development environment, we were only seeing a single day of data. Not only that, but the day ...
1
vote
2answers
617 views

ProFTPD - What is intended use of IdentLookups config option?

I think question title is self-explanatory, but I can re-iterate. I have just recently got annoyed enough at my own dedicated server's FTP connection delay to go hunting for what causes delay. ...
1
vote
2answers
456 views

Is there any advantage to creating a subdomain for my LDAP server?

Having just started using OpenLDAP to authenticate users across web apps, I'm intrigued by a pattern I'm seeing in the documentation: Most install/config guides seem to (implicitly) recommend running ...
9
votes
7answers
877 views

C:\ is for OS, D:\ is for Data?

"Back in the day" we always segregated our OS drives (in Windows) from our Data drives. In the Linux world, although I am much less familiar with it, I am aware that the wisdom dictates even more ...
1
vote
5answers
774 views

What to document in my network/domain?

I am doing system admin for a small domain on the corporate network. We have our own DNS, AD, DHCP servers etc and use both HyperV and ESX. What exactly do I need to document for this sort of setup? ...
4
votes
3answers
8k views

How to give write permissions to multiple users?

I have a web server and I'm uploading files using an FTP client. Because of that the owner and the group of the file are taken from the user used during the upload. Now I have to make this file ...
8
votes
3answers
566 views

What are some best practices when taking over IT at a new company? [closed]

I thought this would make for a good topic with some interesting suggestions. What are the first things you would do when taking over IT at a new organization? What are some red flags you would look ...
11
votes
2answers
2k views

Best practices for settings for Oracle database creation

When installing an Oracle Database, what non-default settings would you normally apply (or consider applying) ? I'm not after hardware dependent setting (eg memory allocation) or file locations, but ...
3
votes
7answers
642 views

DDOS Attack Victim - How much to Admit?

Here's the environment: Website that hosts a forum/journal/bboard/email/socialmedia application in walled garden (ie you pay to get to use it or are invited to do so Many Clients pay to use the site ...
17
votes
8answers
881 views

What is the system administration equivalent to dogfooding?

Software developers have the concept of "dogfooding", which is where they personally use the software that they are developing, often on a regular basis. For some projects, the direct interaction it ...
31
votes
5answers
26k views

Windows Active Directory naming best practices?

After experimenting with Windows domains and domain controllers in a virtual environment, I've realized that having an active directory domain named identically to a DNS domain is bad idea (Meaning ...
25
votes
12answers
26k views

Active Directory: delete vs. disable departed employees [closed]

When an employee leaves your organization, do you delete or disable their Active Directory account? Our SOP is to disable, export/purge the Exchange mailbox, and then after "some time" has elapsed ...
1
vote
2answers
194 views

Best practice for floating license purchases?

Is there a best practice for determining how many floating licenses of a product to buy? I need to purchase Rational Rose for 15 developers, but I'm unsure as to how to determine how many floating ...
60
votes
5answers
35k views

Top level domain/domain suffix for private network?

At our office, we have a local area network with a purely internal DNS setup, on which clients all named as whatever.lan. I also have a VMware environment, and on the virtual-machine-only network, I ...
16
votes
8answers
1k views

Best practices for backup checking?

It is a common situation, when administrator makes system for automatic backuping and forgets it. Only after a system fails administrator notices, that backup system has broken before or backups are ...
42
votes
7answers
5k views

Cable Management Policy

We've all seen good and bad examples of cable management. What are objective, measurable requirements that can be used in a policy to maintain cabling order in the rack/server room/data center? ...