Revision as of 13:01, 21 February 2013

Resources on this list should be checked regularly to see that they are in working order.

During "walkthrough"

italicized text is checked on a per room basis

Check each server up and up-to-date? http://monitor/cgi-bin/nagios3/tac.cgi
- HINT: A report is also emailed to asswatch every night at midnight. If you want to use the command line, there are three scripts: list_problems (lists everything that has a problem, and what that problem is), down (lists down servers), and needs_upgrading (lists servers that need to be "aptitude dist-upgrade"ed). These scripts live on monitor.
web services administration (wiki, todo, dev/svn, dev/projects, mail, www, others...)
- clarification needed: what part of these services need checking?
- integrate this with nagios? Ryan will look into what can and needs to be integrated. (any service marked with http seems to get checked by nagios)
check if there are any open security announcement tickets.
- HINT: Search for open RT tickets created by ass-security@our_domain. If you like the command line, then you can use this (mainly self explanatory, just run it) script: ./ass/scripts/security/show_security
certificate and gpg key expiration dates
- check the https and imaps ssl certs (renewed February 2012, expires February 2014)
  - openssl x509 -in /path/to/certificate -noout -text
- check apt signing key (expires January, 2014; Update 6 months before expiration)
check to see if our mail server(s) have been blacklisted:
- http://www.dnsbl.info/dnsbl-database-check.php
- http://www.anti-abuse.org/multi-rbl-check-results/?host=67.51.72.37
off-site backups are current
on-site backups are current

Security cameras
- Software set up correctly and running.
- pointing in correct direction
- check for old (over two weeks?) unarchived events
- check for archived events ... then what?
visual inspection
- look for things like bad fans on servers
- dust/vaccuum servers, switches
- look dangerous cable tangles, stress/tension on punched-down cables
UPS check
- Tests successfully
- Balanced load
- Battery installation within 3 years
kill-a-watt monitoring
- log the current server's kilowatt's for the past cycle
- move kill-a-watt to new server
Look for rogue wireless access points
- trace all cables connected to:
  - credit card machine network (at least monthly, log in asssvm/docs/logs/credit-card-network)
  - wireless network (is this needed? more we're looking for wireless where it shouldn't be)
- policy and procedure discussion

watch all of the asswatch scripts, and makes sure that they are working. (Ryan does this)
rootmail cleanup/checkup (Ryan) and current owner of RT#10988
check each server is listed in purpose (asswatch)
backups working on each server (asswatch)
check each server with maintenance notes and script, check rootmail is working (Ryan does this every so often, probably doesn't need to be done often)
Are all printers on, ready, and without stalled jobs?? (nagios)
mailing list moderation (handled by freegeek moderators)
- reply to subscription requests to determine sentience
Outgoing Phone Message (handled by front desk)

@@ Line 40: / Line 40: @@
 *  Look for rogue wireless access points
 ** trace all cables connected to:
-*** credit card machine network (log in asssvm/docs/logs/credit-card-network)
+*** credit card machine network (at least monthly, log in asssvm/docs/logs/credit-card-network)
 *** wireless network (is this needed? more we're looking for wireless where it shouldn't be)
 ** [http://todo.freegeek.org/Ticket/Display.html?id=20057#txn-254415 policy and procedure discussion]