[axxs-sysadmin] SPAM, (was No Database connection for A-IMC)

[finn]

Hi,

Dave Fregon schrieb:
> On Mon, 2006-11-13 at 17:19 +1100, aketus wrote:
>> Hey Dave,
>>
>> I'm totally 100% in agreement about the actualy IP logging policy and  
>> I make no move to change the policy :) for precisely the reason that  
>> we have it..
>>
>> I think in the case of maintenance, we should turn on IP logging  
>> *very* briefly in order to gather the info required to maintain, say  
>> in this case, Adelaide IMC (which in turn means maintaining the uptime  
>> of all the sites hosted on axxs.org by consequence), then switch it  
>> back off again and destroy the logs.
> 
> ahh yes, I should have explicitly said 'Yea, just destroy the logs after
> you have done so' .. I ended up on a tangent 8-}

One thing that IMCs use in this situation is logging to a ramdisk, so
that nothing touches a HD.

Once the computer is rebooted, then the contents of the ramdisk are
lost. Of course this is only useful if an attacker does not have access
to the running machine .. so should in any case be used sparingly.

ciao,
finn


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 249 bytes
Desc: OpenPGP digital signature
Url : http://lists.indymedia.org/pipermail/axxs-sysadmin/attachments/20061113/416e11e8/attachment.pgp