Hello!

First let me thank you all (only one reply for all to save bandwidth).

Good News: About three hours ago I got the okay, that they will start a
project replacing the ol' Novell with Debian. Some of them are a bit
sceptical, but I'm sure they will be surprised and beaten by the stability
(isn't too hard - the Novell server goes down three times a day, or gets
simply stuck. And they don't have heavy load).


On Thu, Mar 05, 1998 at 12:01:59PM +1059, Craig Sanders wrote:
> On Wed, 4 Mar 1998, Marcus Brinkmann wrote:
> 
> > I have managed to promote Debian in a small but expanding firm
> > (currently a dozen systems). They have old Novell Net and Samba at the
> > moment, but they like Linux and want to change somehow. They allow me
> > to give them a wishlist for a Debian System, and they'll buy it, and
> > now I really need some help here.
> >
> > TASKS: File Server, Print Server, Internet Connection per ISDN (so
> > this would work as a Gateway & Firewall) (light load), File Backup,
> 
> If you can do it, i would suggest that you put the gateway/firewall on a
> separate box. scrounge up an old 386 or 486 (running debian, of course)
> if you have to.

I think they will have a few spare machines when they get new machines.
Perhaps the old Novell Server can do a good job there ;) It is a 486.

Debian is mandatory - I will not help them with another system.
 
> It's not a performance issue - a well configured debian box can easily
> handle all of those tasks - it's a security issue. the fewer services
> running on your firewall, the less likely it is that a newly discovered
> security hole can be exploited.

Ok, I understand this. I will take it to my heart.
 
> something like this ought to do it:
> 
>       ^ (ISDN line to the internet)
>       |
>       |
>       v
>     +-------+      +--------+
>     |  386  |      | Server |
>     +-------+      +--------+            (other machines)
>         |               |                 |    |   |   |
>         +------------------------------------------------------------->
>             eth0 - 192.168.1.0/24 (internal, firewalled LAN)
> 
> one box *can* do the lot, but it greatly complicates the firewall and
> other security configuration.

Ok, this looks like something I also was thinking of. As you already guessed
in your other mail, I'll have to use IP Masquerading. 
 
> > and probably to be used at Workstation, too (login, probably with X
> > for Windows)
> 
> see comments below about mixing WS & Server functionality.
> 
> > If you could take a quick look at the following lists and comment on it, I
> > would be very grateful.
> > 
> > Pentium >= 166, probably not so important
> > RAM     >= 64, probably more (96?, 128?)
> 
> more memory is good.  much more important for fileserver performance than a
> few extra Mhz processor speed.
>
> > SCSI discs, 2 or more each 2-4 GB. Is buslogic available in Germany? Other
> >                                    good brands?
> > Mainboard ASUS
> > Normal architecture or PS/2 (is PS/2 well supported?)
> 
> PCI.

Alex said, that PS/2 wouldn't cause any problems, but probably it is better
to keep on the safe side.

> > What is a good Graphic card (they'll need a good one) is Matrox Millenium
> > well supported? Other brands?
> 
> anything that works. an S3 Trio-64 is good value for money...cheap and
> adequate for most needs. 
> 
> remember that this machine is primarily a server, not a workstation.
> mixing those two functions is OK if the user is the system admin
> and knows what they're doing (and how to avoid harming system
> performance/stability)....however you can't trust a normal user to know
> that they really shouldn't be playing quake or real-video on the company
> file-server.

okay, I will have a word with them ;)  They should really effort a second
machine as a linux terminal to play with. Would be easier to handle anyway.
 
> > What is a good backup device?
> 
> DDS-2 or DDS-3 tape.  don't bother with flimsy toys like ftape units.

Ok. (Have to check out what DDS is, but will do.)
 
> > What is a good network card (they will switch to a faster network soon, at 
> > the
> > moment they use NE2000 compatible cards, but I recall something with 100Mbps
> > or so).
> 
> PCI NE-2000 clones work well in my experience. they're not the fastest
> card around, but they're dirt cheap and easy to set up.

Yes. I said something about 100Mbps above. I asked again, and they have some
doubts (and me too). I don't think they need those fast lines, but some
business man has suggested a) 100Mbps lines and b) a router. Summa sumarum
this would cost 3.500 $. Is this useful for such a small park? (In my
opinion, they would be better off to invest the money in three linux
machines.)
 
> > Other things (as CD-ROM, Monitor, etc) I do not expect problems
> > with. Should I?
> 
> i've had problems with 24x CD-ROM drives. didn't bother figuring out
> why, i just swapped it with a W95 user for an old 8x cd-rom.

I never understood why somebody needs so fast CD-ROMS ;)

BTW: I really am grateful for your help. I have the chance here to promote
Debian not only for network, but also for development of certain software
and hardware. *And* they are kind people, asking me what they can give back
to the Linux community... and it is the first time I do such a thing, so I'm
a bit uncertain about the requierments.

About squid: At the moment, primary goal is file and print serving. But I
will keep in mind the possibility for better web access.

Many, many thanks to all of you. I will look at all your hints and
recommendations!

Marcus

-- 
"Rhubarb is no Egyptian god."        Debian GNU/Linux        finger brinkmd@ 
Marcus Brinkmann                   http://www.debian.org    master.debian.org
[EMAIL PROTECTED]                        for public  PGP Key
http://homepage.ruhr-uni-bochum.de/Marcus.Brinkmann/       PGP Key ID 36E7CD09


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .

Reply via email to