Red-Flag Linux Enterprise office automation solution

Article Title: Red-Flag Linux's Enterprise office automation solution. Linux is a technology channel of the IT lab in China. Includes basic categories such as desktop applications, Linux system management, kernel research, embedded systems, and open source.
Author: Confused
　　
Enterprise office automation solution based on red-flag Linux
With the rapid development of computer technology and Internet, Enterprise office automation has become the trend of the times and has been applied in more and more enterprises. Office Automation (OA) greatly improves the office efficiency of enterprises, reduces office costs and personnel overhead, and is usually combined with the enterprise's MIS system to promote the improvement of enterprise management level.
　　
In the past, enterprise OA systems were generally two typical C/S or B/S architectures: The server uses UNIX or Windows NT as the operating system, and each user (unit or individual) WKS are based on Windows 95/98. The advantages and disadvantages of these two solutions are obvious: UNIX systems have unparalleled high performance, high stability and high reliability compared with other operating systems, but the operation and maintenance costs are high, and the maintenance is not convenient, in addition, the complex UNIX command sets and user interfaces are daunting for general users. the user interfaces of Windows NT are friendly and easy to maintain, but the stability is poor. How can we achieve an optimal balance between high performance, stability, ease of use, and maintainability? The emergence of Linux promptly solved the thorny problem that plagued enterprise users and system integrators.
　　
With the rapid development and popularization of Linux operating systems, the advantages of Linux are fully apparent: because of the UNIX core, it has unparalleled performance and high stability for Windows NT; following the GPL principle, for users, the cost is almost zero. there are more and more third-party applications that support Linux. Linux started to play an important role in the process of Enterprise office automation.
　　
Based on the practice, this paper proposes an economic, fast, and reliable enterprise OA construction solution with red-flag Linux as the main operating system, this allows users to securely and reliably access internal and external resources to achieve electronic, automated, and paperless Enterprise office work, minimizing office costs.
　　
The OA solution consists of the following parts:
　　
L enterprise internal LAN (Intranet) construction
LWeb e_office service
L firewall
L proxy service
L print/file service
L powerful enterprise-level development platform
　　
1. enterprise internal LAN (Intranet) construction
The internal LAN (Intranet) is the basis of the enterprise OA system. with the red-flag Linux 1.1 Server version as the carrier, you can build your own Intranet network conveniently, quickly, flexibly, and economically.
　　
1.1 Linux LAN Network architecture)
　　
Use a converter to convert the Internet interface to twisted pair wires and connect directly to a dual Nic Server. Another Nic of the Server and other servers and clients are connected to a Hub to form a LAN. The dual-Nic server acts as a firewall and gateway to control the security of intranet and Internet connections. Other services such as file server, proxy server, email server, and Web server can be run on the server. Another server can be used as a database server to run database services.
　　
An external Nic must have a formal IP address. the private IP address can be used for the Nic of another Nic and other computers, the gateway addresses of other computers point to the internal IP address of the firewall gateway server. The network configuration of the firewall gateway server should be set according to the applied IP address.
　　
1.2 Linux LAN Hardware requirements (Hardware)
　　
In this solution, hardware requirements include two servers and several PCs, as well as hardware required for network implementation, such as HUB, network cable, and converter. The most important part of the hardware is that the server's performance requirements for Linux are very important. Red-Flag Linux shows its strong advantages in supporting servers and PC products using Intel chips. To maximize the effectiveness of the INTEL architecture and the obvious security and reliability are considerations of the red-flag Linux operating system.
　　
1.3 Linux LAN Software Requirements)
　　
The software of the two servers uses the red-flag Linux 1.2 version. the database server runs the database software package that comes with red-flag Linux. the server that acts as the firewall Gateway can run a variety of Internet applications, such: email server, Web server, and proxy server.
　　
2. Web e_office service
Web E-Office (E-Office business system) is a set of Office automation solutions for small and medium-sized enterprises. it transmits internal information through the Internet, users only need to use a browser (MS-IE 4.0 or more) to connect to the website, enter the employee password after confirmation, you can enter the system to sign the file, in addition to this, it also provides internal staff discussions, related manufacturers' materials, and system management functions. These are user-friendly design for file production and management. Web E-Office is the simplest and most economical Office automation solution in the InterNet era.
　　
Features of Web E_office:
　　
1). easy to operate
　　
After several hours of training, users can master various operations as long as they use the browser. System administrators can directly manage E-Office systems through a browser. All functions are divided by layer, which is convenient and easy to use.
　　
2). powerful document circulation function
　　
Allows you to transfer, sign, and query electronic documents within an enterprise. Document flow can be customized or elastically set. Documents can be accompanied by Email or any other documents. Monitors the circulation of documents at any time. You can send an application form. The system automatically calculates the leave.
　　
3). complete personnel management system
　　
The personnel department area can be used to comprehensively manage the entire company's personnel system. The department supervisor can manage the personnel information of the entire department. Employees can modify their personal data on their own. With flexible customization features, you can easily and quickly establish your own personnel system. Combined with the document circulation system, the system can automatically count employees' vacations.
　　
4). convenient bulletin board
　　
Quickly publish various company announcements and notifications. It provides a place for employees to speak out. Multiple methods of information retrieval.
　　
5). quick enterprise information retrieval
　　
Manage various materials of your business partners. Flexible information retrieval.
　　
6). strict permission management
　　
All functions in the system are protected by permissions, which can be used only by authorized users. You can assign different permissions to different users. System Administrator and user permissions can be independent of each other. For changes to important data, the system will automatically record the change and time for future reference.
　　
7). high stability and optimum cost effectiveness
　　
Eoffice runs on the red-flag Linux system. it is currently recognized as an excellent operating system. The red-flag Linux system follows the GPL open system, which can save your overhead to the maximum extent. We provide comprehensive customer service and technical support.
　　
3. firewall
Linux ipchians provides powerful tools for building a firewall. However, the use of ipchains is complicated, and it is inconvenient for the user configuration of traffic recording. To help Hongqi users build their intranets, Hongqi provides a simple and convenient firewall solution. After the configuration is complete, you can provide Internet access for intranet users.
　　
(1) Hardware Requirements:
　　
Dual Nic or one network card and one Modem
　　
(2) Software Requirements:
　　
Hongqi linux1.1, ipchains, vi
　　
(3) installation:
　　
Find the RPM package rf-firewall-1.0-0.noarch.rpm on the CD of the red flag 1.1 and execute the following command on the command line (assuming that the optical drive is installed on/mnt/cdrom ):
　　
$ Rps-i/mnt/cdrom/rf-firewall-1.0-0.noarch.rpm
　　
(4) edit the configuration files source and dest under/etc/gw.
　　
Source is a list of intranets and masks. The file format is: ip av_mask, for example, 192.9.200.1 7. It represents the subnet where 192.9.200.1 is located, and "7" is the number of digits in the mask representing the binary "0" of the subnet address. Assume that the mask is 255.255.255.128, which is expressed as 11111111.111111.1111.0000000 in binary format. There are 25 "1", "7" 0, and "7" are the digits representing the binary "0" of the subnet address. In other words, you need to convert the mask to the binary form. There are several zeros in the number, that is, the av_mask value. For example, the subnet number of 255.255.0.0 is 16. Dest is a list of addresses accessible to internal users. If you decide not to limit it, you only need to write the subnet bit to 32, for example, 0.0.0.0 32. If you want to restrict the access of intranet users to the country, the dest file provided by Hongqi is an example of limiting the access to the country.
　　
(5) automatic start and manual start
　　
The Red Flag firewall is automatically started by default. if you do not want to automatically start the firewall, run the setup command, select services settings, and disable rf-firewall. You can also manually start, shut down, or restart the firewall. The command is as follows:
　　
The manual startup command is:
/Etc/rc. d/init. d/rf-firewall start
　　
Command for manual shutdown:
/Etc/rc. d/init. d/rf-firewall stop
　　
Manually restart the firewall:
/Etc/rc. d/init. d/rf-firewall restart
　　
View firewall rules
/Etc/rc. d/init. d/rf-firewall status
　　
(6) note
　　
If the number of sub-networks in dest and source is 32, other constraints will be invalid.
　　
(7) intranet network settings
　　
The TCP/IP of the intranet machine must use the IP address of the machine where your firewall is located as the gateway. Intranet DNS has two solutions: directly use the actual ISP dns, or configure the firewall machine as DNS, resolve the intranet domain name, and forward other domain names.
　　
4. proxy service
For simple proxies, you can modify the file/etc/squid. conf to meet your needs. The procedure is as follows.
　　
1. locate the network options section and set http_port to the ideal port number.
2. find options for external support programs and set ftp_user to any anonymous logon password, which can be any email address.
3. find the access controls section and perform the following work in this section.
(1) define the acl access list. For details, see the comments in the/etc/squid. conf file.
(2) define the access permissions of http_access and icp_access. for details, see the comments in the file/etc/squid. conf.
For example, the following is an example of the file/etc/squid. conf.
# NETWORK OPTIONS
#-------------------------------------------------------
Http_port 1081
# OPTIONS FOR EXTERNAL SUPPORT PROGRAMS
#-------------------------------------------------------
Anyone@email.server.com ftp_user
# ACCESS CONTROLS
#-------------------------------------------------------
Acl ncic