TODO



All:
----
Add a section in the cf.services.file for netatalk.
Move all the fake domains to bind/fake from bind/pri.
Add squid support: Search /etc/squid.conf for "YOUR OWN RULE" and add "acl localnet src $(LOCALNET)" and "http_access allow localnet".
Add integrit support: Remove all relevant comments in /etc/integrit/integrit.conf and "# ! " in /etc/cron.daily.integrit.
Implement meta-hints about filesharing: ftp should use "-l" and "~ users" when default users are dummy users. And the local user-init, adduser.local and deluser.local should be generic.
Figure out if bind or bind9 is installed as nameserver (currently both are reloaded, which is non-optimal and _can_ lead to errors)
Calibrate max open files based on available memory (as suggested at http://www.linuxdoc.org/LDP/solrhe/Securing-Optimizing-Linux-RH-Edition-v1.3/chap6sec72.html and http://www.xenoclast.org/doc/benchmark/HTTP-benchmarking-HOWTO/node7.html):
    FILEMAX = (INSTALLED_RAM*256)/4
    /etc/sysctl.conf: fs.file-max = FILEMAX
    /etc/security/limits.conf: * soft nofile 1024
    /etc/security/limits.conf: * hard nofile FILEMAX

Xenux: 
------
Finish the cf.services.fai file
Move all domain files to local-COMMON

DONE:
-----
samba/netlogon/common.bat is XENUX-centric
Correct dns (and other places like samba?) to use FQDN, not only host.