Byebye Openlinux

Vu Pham vu
Wed Sep 7 13:30:25 PDT 2005


> -----Original Message-----
> From: linux-users-bounces at linux-sxs.org 
> [mailto:linux-users-bounces at linux-sxs.org] On Behalf Of Lonni 
> J Friedman
> Sent: Wednesday, September 07, 2005 1:05 PM
> To: Linux tips and tricks
> Subject: RE: Byebye Openlinux
> 
> On Wed, 7 Sep 2005, Vu Pham wrote:
> > A week ago I had a chance to visit a customer. They have a 
> 4-year old 
> > OpenLinux 2.4  box as their mail server, DHCP, firewall/NAT 
> and VPN server.
> > I got there to install a Cisco router which takes over the 
> > NAT/firewall/DHCP/VPN functions. Now that OpenLinux is only a mail 
> > server but it runs very well.
> 
> Were they applying their own updates?  If not, they are 
> incredibly stupid trying leaving that thing exposed to the 
> internet with th ecountless security holes that COL-2.4 now has.
> 

I had to do those updates. All I did were to upgrade the kernel to 2.4.2,
upgrade the sendmail, pptpd and iptables modules and close all other
unecessary ports from the external side. I did that long time ago ( when
2.4.2 just relased ). The iptables log shows some attacks but it still runs
fine.

The only one time it was attacked very seriously was by a lightning :) I had
to get there to replace the NICs.

Vu



More information about the Linux-users mailing list