Short description of Evidence control system This directory contains the backbone of the control system. Config is the configuration server and needs to run before any other DIM server that requests configuration information is started (if a configuration request cannot be answered, a server will normally not start). A configuration file can be given on the command line. DColl is the central data collector. It subscribes to all services handled by the name server and writes them to disk (except those excluded in the configuration file). It also provides a history service for all DIM services and a command for logging. Alarm can be configured to check all servers for availability and status and can produce a master alarm. The DIMDIR environment variable needs to point to the DIM installation directory when compiling. DIM_DNS_NODE must point to the name server for any DIM server to run. - Oliver Grimm, 18/1/2010 Version history --------------- 19/5/2010 Service histories now available via DimRpc from DColl, not via .hist service When regular expression compiling results in error, State is set to ERROR, not FATAL. The erroneous expression is ignored in the following. Preliminary firewall settings (rule 9 for DIM, rule 10 for X11 over ssh) Chain INPUT (policy ACCEPT) num target prot opt source destination 1 RH-Firewall-1-INPUT all -- anywhere anywhere Chain FORWARD (policy ACCEPT) num target prot opt source destination 1 RH-Firewall-1-INPUT all -- anywhere anywhere Chain OUTPUT (policy ACCEPT) num target prot opt source destination Chain RH-Firewall-1-INPUT (2 references) num target prot opt source destination 1 ACCEPT icmp -- anywhere anywhere icmp any 2 ACCEPT ipv6-crypt-- anywhere anywhere 3 ACCEPT ipv6-auth-- anywhere anywhere 4 ACCEPT udp -- anywhere 224.0.0.251 udp dpt:5353 5 ACCEPT udp -- anywhere anywhere udp dpt:ipp 6 ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED 7 ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ssh 8 ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:sieve 9 ACCEPT tcp -- anywhere anywhere state NEW tcp dpts:5100:x11 10 ACCEPT tcp -- anywhere anywhere state NEW tcp dpts:x11:6063 11 REJECT all -- anywhere anywhere reject-with icmp-host-prohibited