To Optimize Network and System Settings

Steps

1. Setup coreadm with the following commands:

   mkdir -p /var/crash/cores coreadm -g /var/crash/cores/%f.%n.%p.core -e global -e global-setid -e log -i /var/crash/cores/core.%f.%p.%n.%u.%g.%t -e process -e proc-setid

2. Setup a cron job to regularly purge old core files:

   0 5 * * * find /var/crash/cores -mtime +7 -type f -exec rm {} \;

3. Make sure the /etc/hosts file contain hostname resolutions of all BE and FE servers:

   set ncsize=4194304 set ufs_ninode=8388608

4. Tune the network settings for LDAP access on the servers in the mail clusters:

   ndd -set /dev/tcp tcp_conn_req_max_q 4096 ndd -set /dev/tcp tcp_keepalive_interval 600000 ndd -set /dev/tcp tcp_ip_abort_cinterval 10000 ndd -set /dev/tcp tcp_ip_abort_interval 60000

   Make these changes permanent by adding the above four configuration commands to the bottom of the /etc/init.d/inetinit file.

5. If desired, run the Sun Security Weakness Attack Tool (SunSWAT) to audit network vulnerabilities:

   /opt/NSGswat/bin/sunswat -s isss