Questions asking for best practices in a given field. Be aware, that sometimes there might be no generally accepted best practices, in which case the question is likely to be closed for being subjective.

learn more… | top users | synonyms

2
votes
2answers
556 views

Best Practice: bind, dhcpd, mysql, httpd, etc running on KVM Host?

With respect to "Best Practice" when it comes to virtualization, is it advisable to run services such as bind and / or dhcpd on a KVM host or should these services be run from a guest machine? How ...
6
votes
8answers
1k views

System administration standard [closed]

I have been given the responsibility to manage a team of 4 system admins. They are managing 70+ servers. They don't yet have written processes/procedures/practices. I don't much about system ...
7
votes
2answers
600 views

As an admin, what tools do you use to log what you do to your boxes? [closed]

I am more of a linux applications developer than an admin. Over time, I've built servers and maintained them, sometimes to offer services, mostly just to develop the applications I work on. Way back ...
0
votes
1answer
165 views

S3 backup: bucket vs. volume

I've inherited a project that has been pushing encrypted (GPG) DB backups via a backup script to an S3 bucket. That's all been well and good, but now that bootable EBS instances (where the project ...
0
votes
2answers
388 views

LAMP Best Practices

Does anybody know of a checklist for LAMP best practices? There is a lot of disparate advice on the 'net, but it would be nice to know if somebody has already published a best-practices guide or book ...
2
votes
1answer
500 views

Bandwidth Sharing & Accounting for large networks::Best Practices

I have a large network with more than 1500 PCs and 9000 user accounts in a university. We have classified users in 5 groups and are sharing bandwidth among them using MikrotiK's hotspot with NTTAC ...
0
votes
2answers
608 views

What are best practices writing parallel startup scripts in Unix shell (ksh,bash)?

I have a piece of software with different components running on the same Unix machine (web server, DBMS, middleware, different daemons). Startup of the few components depends on the success of the ...
2
votes
1answer
485 views

Best practices with managing log files on my server

My system is generating log files, e.g. for apache, nginx, tomcat, and other things and they grow pretty fast. I am looking for best practice recommendations because there are so many options to ...
0
votes
1answer
509 views

How should I setup an Ubuntu server on EC2 (MySQL, code location, etc..)?

I've started to fiddle around EC2, and I can't seem to understand the "AWS way" of setting up a server. I'm using Ubuntu server 10.10 64 bit, from an official AMI by Canonical. There is an EBD drive ...
5
votes
4answers
1k views

dead man's switch for remote networking interventions on Linux

As I'm going to change the network configuration of a remote server, I was thinking of some security mechanisms to protect me from accidentally losing control on the server. The level-0 protection ...
0
votes
4answers
2k views

Specify the next hop or the interface for static routes

I'm setting up a bunch of static routes (this is a security requirement so don't ask why I'm not using routing protocols). A static route can either be created by specifying the next hop ...
3
votes
1answer
1k views

Fibre Channel zoning best practices

I'm hoping that this will be useful for more people than just me. Right now I've got a fibre channel switch, a NetApp filer, and some servers running Oracle. All of the servers can see the same LUNs ...
19
votes
6answers
2k views

Bad to be logged in as admin all the time?

At the office where I work, three of the other members of the IT staff are logged into their computers all the time with accounts that are members of the domain administrators group. I have serious ...
2
votes
2answers
1k views

Best practice ACLs to prepare for auditors?

An auditor will be visiting our office soon, and they will require read-only access to our data. I have already created a domain user account and placed them into a group called "Auditors". We have a ...
5
votes
2answers
165 views

Why should www.domain and mail.domain be used?

I see the default hostname for mail and web servers being set as mail.domain.tld and www.domain.tld respectively. Why is this? Does it help as you move from a single server to multiple servers? I ...
1
vote
2answers
567 views

Which is generally considered faster or best practice: symlinks or Apache aliases?

I'm curious as to what most people's views are on this subject. Personally, I will almost always prefer symlinks unless I have no other option -- I find that it is far more obvious when someone is ...
0
votes
2answers
2k views

What are industry standards and professional best practices in network hosts naming? [duplicate]

Possible Duplicate: Naming convention for computers It seems an important and difficult dilemma for me how to name network hosts (routers, servers (while a server can be a router and host ...
2
votes
4answers
825 views

Best practice for ONLY allowing MySQL access to a server?

Here's the use case: I have a SaaS system that was built (dev environment) on a single box. I've moved everything to a cloud environment running Ubuntu 10.10. One server runs the application, the ...
4
votes
1answer
4k views

Best Practice: iDRAC & NIC Selection

I am setting up a new Dell server with iDRAC 6 Express. My options for the NIC are: 1) Shared 2) Shared with failover to LOM2 3) Shared with failover to all LOMs The server has 4x LOMs. My ...
1
vote
2answers
214 views

datacenter network change control best practices

I have been tasked with compiling a list of possible network equipment changes at a data center. The task includes tagging which changes need change control and which don't. Does anyone know of a ...
8
votes
1answer
915 views

Best practice for Exchange 2010 HA topology considering 6 x Exchange licenses and TMG 2010

What would be best topology considering that: 6 x Exchange 2010 Standard Licenses 2 x Separate locations that are supposed to support redundancy in case of link problems 4 x Forefront TMG 2010 with ...
3
votes
3answers
239 views

New Server hardware verification tests

Is there any kind of best practice when it comes to verifying the hardware of a new server, before putting it into production? For instance, running it through the manufacturer's hardware test, or ...
1
vote
4answers
328 views

Plugging Surge Protectors into UPS [duplicate]

Possible Duplicate: UPS and power strip interactions? I have heard that plugging a server into a surge protector (cheapo power strip) is not good. Is this accurate? For instance: Server ...
1
vote
3answers
822 views

Setup Postfix as a null client?

I'm having a bit of trouble setting up postfix as a null client and have some questions. I'll be aiming to use SMTP as this is what most web applications use as a way to connect to the email server. ...
3
votes
2answers
180 views

IT Considerations for a company name change

Nothing is "for sure" yet but there is a good chance my company will be changing it's name in the future. Our IT requirements are relatively modest - Exchange server, IIS, MSSQL, etc. My question ...
0
votes
5answers
749 views

Reserve Web Server - How to synchronize them almost in real time [closed]

Maybe my question is a little bit stupid, but idea is to have a reserve web server, which will be activated WHEN main web server becomes inactive (DDos, or any other incident). Please name common ...
1
vote
4answers
429 views

Editing root-writable files with only sudo rights

Our sysadmins login to boxes using unprivileged accounts with sudo rights. I often, out of habit, open files in vim instead of sudoedit. I do not want to get into the habit of using sudoedit. My ...
8
votes
4answers
28k views

How do you diagnose packet loss?

I realise this is very subjective and dependent on a number of variables, but I'm wondering what steps most folks go through when they need to diagnose packet loss on a given system?
1
vote
2answers
627 views

Best way to physically trace and document your network cabling and equipment

I am starting my network inventory and I would like to minimized wasted time and do a good work for me and for people coming after me. It's a 4 floor building and there is no documentation about ...
0
votes
5answers
212 views

How to detect weak points in my lan

I am starting to "polish" the LAN here at my new work and since it's the 1st time I face sommething that big (almost 300 clients a switches, proxy) I would like to understand easily where I get weak ...
3
votes
2answers
551 views

Best Practices for Webserver Benchmarking

I have a webserver that I wish to benchmark before I make some optimizations to it to see if they have any effect. However, I want to know what are the best practices for benchmarking? For example, ...
0
votes
5answers
334 views

Setting up DNS records for a shared host

So I'm setting up this server right now that'll host multiple websites / domains. What are the current best practices with regard to DNS records? I admit to 'just having done something' up to now, ...
-4
votes
3answers
499 views

IPv6 is comming [closed]

Very soon, all of us will face one of the greatest changes in the global network in last 30 years: moving to the IPv6. So many system administrators will have to decide, how to handle this problem: ...
3
votes
3answers
97 views

Compiling and maintaining applications?

What configure format do you use for compiling and why ? Example (you don't have to reply as the example but do state your directory setup): <Layout MyPersonalizedLayout> prefix: ...
7
votes
6answers
7k views

Daily/Weekly/Monthly/Annual Sysadmin Tasks

This should probably be community wiki. I'm trying to come up with a list of all the sysadmin tasks that we should be doing on a regular basis because I believe we're not doing enough at our company. ...
17
votes
1answer
1k views

How to correctly move a server inside a rack up and down

Maybe a bit stupid question, but Sometimes (rarely but it happens) I need to move a server in a rack 1-2U up or down. What do you think, which of the ways is the most correct and useful and why? ...
2
votes
2answers
406 views

Statistics for iptable best pratices?

Looking for statistics on IPtable best pratices - appears that a server like www.cloudflare.com would parse iptables and look for gaps and trends in iptable configs - but don't think they'd publish ...
0
votes
4answers
2k views

Windows Server 2003 DNS: What is the purpose of Forward Lookup Zones?

What is the purpose of Forward Lookup Zones? I have a domain abc.com setup in DNS as a forward lookup zone. Now I want to add a new domain xyz.com to my DNS. I looks like I can either create a new ...
5
votes
3answers
496 views

Management Network Best Practices

I am looking at setting up a Management vlan, on which I will put all the Management interfaces for my various networkable devices (Firewall Mgmt Interfaces, Server RAC, WAP Mgmt Interfaces, etc). ...
12
votes
5answers
19k views

A secure, standard iptables rule-set for a basic HTTP(s) webserver

I have been trying to put together a basic server iptables script that will work for most sites just running a basic webserver using HTTP(S) and SSH (ports 80, 443, & 22). After all, most VPS only ...
-1
votes
3answers
197 views

Why are we constantly told, “There's a disk space issue”? [closed]

This morning, I was helping a BA with a particularly complicated report. I notice that in the reporting Development environment, we were only seeing a single day of data. Not only that, but the day ...
1
vote
2answers
674 views

ProFTPD - What is intended use of IdentLookups config option?

I think question title is self-explanatory, but I can re-iterate. I have just recently got annoyed enough at my own dedicated server's FTP connection delay to go hunting for what causes delay. ...
1
vote
2answers
521 views

Is there any advantage to creating a subdomain for my LDAP server?

Having just started using OpenLDAP to authenticate users across web apps, I'm intrigued by a pattern I'm seeing in the documentation: Most install/config guides seem to (implicitly) recommend running ...
9
votes
7answers
884 views

C:\ is for OS, D:\ is for Data?

"Back in the day" we always segregated our OS drives (in Windows) from our Data drives. In the Linux world, although I am much less familiar with it, I am aware that the wisdom dictates even more ...
1
vote
5answers
811 views

What to document in my network/domain?

I am doing system admin for a small domain on the corporate network. We have our own DNS, AD, DHCP servers etc and use both HyperV and ESX. What exactly do I need to document for this sort of setup? ...
4
votes
3answers
9k views

How to give write permissions to multiple users?

I have a web server and I'm uploading files using an FTP client. Because of that the owner and the group of the file are taken from the user used during the upload. Now I have to make this file ...
8
votes
3answers
615 views

What are some best practices when taking over IT at a new company? [closed]

I thought this would make for a good topic with some interesting suggestions. What are the first things you would do when taking over IT at a new organization? What are some red flags you would look ...
11
votes
2answers
2k views

Best practices for settings for Oracle database creation

When installing an Oracle Database, what non-default settings would you normally apply (or consider applying) ? I'm not after hardware dependent setting (eg memory allocation) or file locations, but ...
3
votes
7answers
651 views

DDOS Attack Victim - How much to Admit?

Here's the environment: Website that hosts a forum/journal/bboard/email/socialmedia application in walled garden (ie you pay to get to use it or are invited to do so Many Clients pay to use the site ...
1
vote
7answers
1k views

Employee no longer with the company

When an employee is fired or let go, it is critical to disable their accounts and access to resources immediately. How do you handle this at your organization?