* service domain aliases files
* service domains whitelists/blacklists/neverusers/RBLs
-== make dns auto update on shutdowns ==
-
-one day, when all these dynamic things are in their own dns, we imagine we
-would just do shutdown -r 60 kernel and a nagios check or something will remove
-the node from DNS automatically
-
+== puppet poneys ==
+=== make security.debian.org deployment fully automated ===
+* includes correct rsyncd.conf via xinetd
+* includes correct apache config
+* includes correct vsftpd config
+* includes ferm rules for all those services
+* minimum information provided should be the IPv4 and IPv6 address