Follow the Australian Telecommunications scene NEWSLETTER- FREE TRIAL
The Linux distillery
Bringing the world of Linux to you, David cuts through the tech and shows you how it works and how to use it, in terms that apply to any distro. RSS
Technology news and Jobs arrow The Linux distillery arrow Vomit or Linux: your choice
Vomit or Linux: your choice E-mail
by David M Williams   
Wednesday, 27 February 2008
The more he considered moving critical server infrastructure to the co-location site, the more persuaded the IT Manager became that this was a great opportunity to enhance security.

At that time, the mail and web server was hosted within their network. And on a domain controller. While the risk was not great, there was undoubtedly a risk that anyone successfully able to penetrate this Internet-exposed machine could compromise essential services as well as get inside the private network.

After discussion with colleagues, he became persuaded that the ideal solution wasn’t just doing the most obvious thing of setting up yet another Windows server or simply transplanting the existing server as is to perform the exact same functions.

It weighed on his mind; did a new server with a highly dedicated function really need to be part of their Active Directory domain? Ordinarily that would have been the set up but the more he pondered the more he realised how foolish that was.

In the end, the solution worked out like this: the existing server was moved; after all, it was the mail server and the 30mb/s bandwidth to the branch network was a compelling factor. However, it was no longer directly exposed to the Internet.

Instead, the 100mb/s Internet connection was plugged into a brand new Linux server, which contained two network cards and also plugged into the mail server, which by now was “just” the mail server: the web functionality was taken from it and onto the Linux box.

This Linux computer was the sole machine offering inbound Internet services, and so accepted SMTP e-mail also which it forwarded on to the dedicated mail server. However, it didn’t just do so indiscriminately. Using ClamAV and SpamAssassin the incoming e-mail was cleansed en route. This was a bonus: the company had implemented Exchange 2007 which was a 64-bit only product. Yet, at the time of purchase, their chosen anti-virus vendor, Symantec, did not offer any 64-bit or 2007-compatible version of Symantec Mail Security for Exchange. Thus, they had no anti-spam or anti-virus system in place for incoming mail. Spam was becoming a growing problem but one that they had little time to look at again. Without really thinking about it they got it for free as part of the Linux deployment, much to the delight of staff.

IT staff found the new server a pleasure. It required little maintenance, and it was a doddle to ssh into from the office or home if they needed to work on it.

Originally, they told me, they would not have put any thought into the decision. They would just have rolled out yet another Windows server because it’s simply what they did. On reflection they are pleased they took the time to stop and think about it sensibly. They couldn’t imagine putting any critical and security-minded services on anything other than Linux now.

So, my parting words to you: don’t just go the safe route. Don’t be a dog returning to its vomit. Don’t be like a sow cleaning itself just to roll in the mud again. Don’t be the girl who keeps dating the wrong men. Don’t engage in repetitive compulsion.

Next time you need new equipment, do think about your needs and do think about the best solution not just the way it’s been done before.

Powered By Joomla Tags

Please enable JavaScript in your browser to post your comment!



 
< Next story in category   Previous story in the category >
iTWire user statistics Visitors last 30 days
694,279
Subscribers 15,210
#1 independent technology news advertise here
  •   *  
  • Search
  • AdvSeach
  • Login
  • Events
  • FreeStuff

- Advertisement -

Featured Whitepapers

Follow iTWire on Twitter

About iTWire

iTWire is all about technology news, information, jobs and community for the IT and telecommunications industry professional. Subscribe to our free ICT daily newsletter