test

Solaris ISP Server 2.0 Installation Guide

Setup Guidelines

This chapter discusses the guidelines for configuring your network host for the installation of Solaris ISP Server software. This configuration information is essential for successful installation. Please read carefully.

Install Scenario

You must design your network before installing Solaris ISP Server. This section discusses two examples of a Solaris ISP Server network hosts setup. Use the network hosts setup example that most closely suits your environment.

Sample Network Configurations

This section describes a sample base and expanded network setup, and the requirements and recommendations for the hardware configuration of the setups.

Note -

We do not assume the existence of a firewall in our example network configurations. If you are using an Internet firewall product to control network traffic to or from any Solaris ISP Server software host, you should examine the security policy controlling the host to make sure the relevant types of communication are allowed. This document does not offer recommendations related to Internet firewalls.

Figure 2-1 Sample Base Setup

Graphic

Figure 2-2 Sample Expanded Setup

Graphic

To setup a Solaris ISP Server network, you require high-end workstations and primary and secondary DNS servers. You need not install Solaris ISP Server extensions and services on a host acting as a DNS server. Most extensions and services only require the ability to perform name lookups regularly. The hosts must be on a network connected to the Internet and you can use any server on the network to act as a client host.

While preparing a host for the installation of Solaris ISP Server software, we recommend you reserve:

Changes to Solaris

This section discusses the reconfigurable changes that may be made to Solaris services during host configuration. The installation of Solaris ISP Server platform extensions and services with their default configuration will override the default service behavior on the hosts where they are installed. This procedure creates a more secure server by disabling Solaris network utilities that are not essential to the Solaris ISP Server software installed on the system.

Note -

You must review and may modify, if necessary, the default settings during host configuration.

If you accept the default installation setup, these Solaris services will be disabled, unless noted otherwise. Disabling of these services is not required, but we recommend disabling these services to avoid potential security holes and to conserve resources. To change the value of these services, inetd.conf will be modified, unless stated otherwise.

Closing Potential Security Holes

We recommend disabling of the following services to ensure protection for passwords and to restrict access to hosts for unauthorized individuals.

Note -

If you accept the default setting, you will no longer be able to access the host with these disabled "r" commands.

We recommend disabling the following services to protect information from unauthorized users. Disabling these services will enhance system security and will restrict access to system information by preventing host responses to these network requests.

Conserving Resources

We recommend disabling of the following CDE and OpenWindows services unless they are required in your environment. Disabling these services will enhance system performance.

We recommend disabling the following network (inetd) services unless required in your environment. Disabling these services will free resources and enhance system performance. Modify the default configuration if you require any network utilities listed below.

We recommend disabling of the following services unless they are essential for your environment. Disabling these services will enhance system performance. Please modify the default configuration if you require any services listed below.

Note -

You can also refer to the on line help during host configuration for help in enabling or disabling the Solaris services.

Solaris ISP Server admin File

Solaris ISP Server uses an administration file that overrides your system default parameters. You must accept this administration file to install Solaris ISP Server software. If you are installing Solaris ISP Server 2.0 software:

Please review the parameters discussed in this section before installing Solaris ISP Server software. See admin(4) man page in man Pages(4): File Formats for more information.

Table 2-1 Solaris ISP Server admin File
 Parameters Default Will use
 conflict ask nocheck
 instance unique overwrite
 setuid ask nocheck
 mail (none) (your current setting)
 space ask quit
 runlevel ask nocheck
 idepend ask quit
 basedir default default
 action ask nocheck
 rdepend ask quit
 partial ask quit

Creating User-defined Scripts

This section discusses certain installation and configuration updates you may provide for executing after installing Solaris ISP Server software. These parameters can be written as a shell script. For example, you can write a command similar to: echo "foo" >> /etc/ftpusers

The path to your script can be registered while configuring the host (Post-Configuration Command screen) for installation of Solaris ISP Server. Or, you may specify a sequence of commands separated by a semicolon. Your postconfiguration command will be executed during a batch install.

Note -

Creating this script is optional.

Some postinstallation system setup examples that you may address in your script to be executed after installation are illustrated in the following. For example: