CURRENT SERVICES

[1]General authentication/configuration data
[2]email 
	receive for:
		angelar.com
		htclug.org
		shatner.boldlygoingnowhere.org
		class.multitool.net
		mail.angelar.com
		smtp.angelar.com
	forward for:
		192.168.1.x
		localhost
	all other relaying denied
	*email for angelar@shatner.boldlygoingnowhere.org MUST BE ACCEPTED
[3]firewall
[4]samba server
[5]NFS server
[6]CVS server
[7]SSH server
[8]webserver for:
	www.htclug.org[9][13]
	angelar.com
	linux.angelar.com
	www.angelar.com
[9]mysql server
[10]majordomo mailing list server
[11]bestcrypt
[12]dhcp server
[13]PHP
[14]awstats
[15]POP3s 
[16]Miscellaneous commandline utilities

FILES WHICH MUST BE SAVED:

1. general
   • /etc/passwd
   • /etc/shadow
   • /etc/group
   • /etc/profile
   • /etc/profile.d
   • /home
   • /var/log
   • /root
   • /var/spool/cron
2. mail
   • see item [1]
   • /etc/mail
   • /etc/aliases
   • /etc/aliases.majordomo
   • /var/log/mail
   • /var/spool/mail
3. firewall
   • /etc/rc.d/init.d/rc.firewall
   • /etc/sysconfig
   • eth1=eepro100
   • eth0=lite-on tulip
4. samba
   • /etc/samba
5. nfs
   • see item [1]
   • /etc/exports
6. cvs
   • see item [1]
   • /home/cvs
7. ssh
   • /etc/ssh
8. httpd
   • /usr/local/apache2/
   • /etc/rc.d/init.d/httpd
   • symbolic link from /var/log/httpd to /usr/local/apache2/logs
   • /etc/rc.d/rc5.d/S85httpd
9. mysql
   • see item [1]
   • /var/lib/mysql
10. majordomo
    • /home/majordomo (includes all necessary binaries)
    • /etc/majordomo.aliases
11. bestcrypt
    • need bestcrypt code. in ~jeremy
12. dhcp server
    • /etc/dhcpd.conf
13. PHP
    • /usr/local/lib/php
    • /usr/local/lib/php.ini
    • /usr/local/apache2/modules/libphp4.so
14. awstats
    • /etc/opt/awstats
    • /var/cache/awstats
15. POP3s
    • /etc/xinetd.d/pop3s
    • /etc/ssl
16. Command line utilities
    • grepmail

• /home/jeremy/noarch does NOT need to be saved, provided all CVS changes are checked in.
• /etc does not change often, so can be backedup before hand. Size is small, so can be soft-backedup to thor.
• /var cannot be backed up while cable modem is active.

FILESYSTEM MAP

Filesystem            Size  Used Avail Use% Mounted on
/dev/hda5              92M   77M  9.8M  89% /
/dev/hda6              51G   20G   32G  39% /home
/dev/hdb6             9.0G  533M  8.0G   7% /sandbox
/dev/hda9             122M  105K  116M   1% /tmp
/dev/hdb1             796M  8.0K  755M   1% /tmp2
/dev/hda8             3.1G  1.7G  1.3G  58% /usr
/dev/hda7             981M  184M  748M  20% /var

PLAN

1. Create shell script to make tar archive of all FILES WHICH MUST BE SAVED. Test before outage window
2. deactivate cable modem.
3. label NICs and cables.
4. drop mysql, apache, sendmail, other services
5. backup FILES WHICH MUST BE SAVED to a file on machine THOR
6. powerdown
7. make hardware changes:
   1. install new CDRW
   2. remove LS120
   3. install auxiliary harddrive on /dev/hdb
8. install new OS
9. boot
10. ensure that following services start at boot:
    • spamd
    • httpd
    • sendmail
    • nfsd
    • portmap
    • sshd
    • dhcpd
    • mysqld
    • smbd
    • nmbd
    • xinetd
11. initiate test plan:
    manual for this run, yes I know that sucks.
    1. test emails to:
       • list of emails deleted to try to impede spam
    2. telnet to port 25 from a remote machine and attempt relaying, to ensure that it is denied
    3. test websites:
       1. www.htclug.org
       2. www.angelar.com
       3. linux.angelar.com
    4. connect laptop to network, and verify that it can DHCP an address
    5. ensure that directories can be nfs mounted.
    6. ensure that cvs stuff can be checked out.
    7. verify that Angela's machine can retrieve mail via POP3s
    8. ensure that same passwords work!
    9. activate cable modem
    10. bring external NIC online
    11. run firewall script
    12. ensure NAT works for internal workstations
    13. test websites from external machine
    14. ensure that firewall script will run at boot time
    15. ssh login to firewall from machine on internet
12. Email announcement to users that upgrade is complete, and let them know to notify me immediately if they find anything amiss
13. continue documenting problems with upgrade for next few weeks, to be incorporated into new, improved plan