AdminToDo: Difference between revisions

From MDWiki
Jump to navigationJump to search
No edit summary
 
Line 1: Line 1:
== System administrator to do list: ==
== System administrator to do list: ==
# More permanently label ports in office (MDVLAN/Chemistry/Off). This requires activating ports and ensuring they remain active
# More permanently label ports in office (MDVLAN/Chemistry/Off). This requires activating ports and ensuring they remain active
# BACS router firewall @ 152.98.159.129
# BACS router firewall @ 152.98.159.129. This is to make login servers more accessible and to protect workstations
## Allow incoming connections from everywhere (incl. UQ) to login servers only, on only ssh port
## Allow incoming connections from everywhere (incl. UQ) to login servers only, on only ssh port, TCP
 
## Allow incoming DHCP/DNS
. Need to set up ports
## Block everything else
## Allow all outgoing traffic
# Electronic door locks. Permanently: HPC room unlocked, main office unlocked, front door locked
# QCIF Backups.
## Create and use mdbackup account.
## Copy grape backup script to webserver. Seperate backup account?
# Turning computers on. Wake on lan set up for all PCs. Create script callable by anyone to wake up specific machines.
# Create /software/forever/ for programs and scripts that will be kept for a long time, regardless of system updates

Revision as of 04:20, 18 July 2007

System administrator to do list:

  1. More permanently label ports in office (MDVLAN/Chemistry/Off). This requires activating ports and ensuring they remain active
  2. BACS router firewall @ 152.98.159.129. This is to make login servers more accessible and to protect workstations
    1. Allow incoming connections from everywhere (incl. UQ) to login servers only, on only ssh port, TCP
    2. Allow incoming DHCP/DNS
    3. Block everything else
    4. Allow all outgoing traffic
  3. Electronic door locks. Permanently: HPC room unlocked, main office unlocked, front door locked
  4. QCIF Backups.
    1. Create and use mdbackup account.
    2. Copy grape backup script to webserver. Seperate backup account?
  5. Turning computers on. Wake on lan set up for all PCs. Create script callable by anyone to wake up specific machines.
  6. Create /software/forever/ for programs and scripts that will be kept for a long time, regardless of system updates