Re: NT/2000 vs Unix based Web Servers

From: Johan De Meersman (johan@ops.skynet.be)
Date: 07/12/02


Date: Fri, 12 Jul 2002 17:04:38 +0200
From: Johan De Meersman <johan@ops.skynet.be>
To: security-basics@securityfocus.com

how about you take whatever webserver you fancy, and throw a *nix
firewall in front of it ? :)

Corio, Jim wrote:

>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>
>I would say that you should run the web server on the Operating system
>that you are most familiar with in an environment that you are most
>familiar with. If you are a Windows administrator, then you will run
>the risk of misconfiguring a UNIX box and Apache when you make the
>move.
>
>One of the biggest failures in web site security is that you have to
>maintain both a system and an application and that is where most
>website exploitations happen is that they do one and not the other.
>Run the application on the OS that you are familiar with (and can take
>the steps to secure).
>
>Jimmy
>
>
>
>>-----Original Message-----
>>From: Mario Behring [mailto:mariobehring@yahoo.com]
>>Sent: Monday, July 08, 2002 9:25 AM
>>To: security-basics@securityfocus.com
>>Subject: NT/2000 vs Unix based Web Servers
>>
>>
>>Hi list,
>>
>>I have some websites running on Microsoft IIS on NT/2000 servers and
>>
>>
>I
>
>
>>have to justify a possible change to Unix servers running Apache or
>>IPlanet using CORBA. The reason is only one, more secure web
>>servers and
>>more secure web sites.
>>
>>Can you guys give me your opinion and some arguments whether
>>should I do
>>this change or not ?? Costs are not an issue here, please give me
>>technical and security arguments.
>>
>>Thanks in advance.
>>
>>Mario Behring
>>
>>
>>
>>
>>
>>__________________________________________________
>>Do You Yahoo!?
>>Sign up for SBC Yahoo! Dial - First Month Free
>>http://sbc.yahoo.com
>>
>>
>>
>
>-----BEGIN PGP SIGNATURE-----
>Version: PGP 6.5
>
>iQA/AwUBPSt+10Zk4thJjdFAEQKF8ACdGeRASTaag4cxFcJa3mofQS8xgvUAnRbq
>Cf6N7bUS7RC4GAlNUjQ1rT+j
>=KkrZ
>-----END PGP SIGNATURE-----
>
>



Relevant Pages

  • NT/2000 vs Unix based Web Servers
    ... I have some websites running on Microsoft IIS on NT/2000 servers and I ... more secure web sites. ... Sign up for SBC Yahoo! ...
    (Security-Basics)
  • Re: OMA not implemented issue
    ... Both are secured with SSL. ... /Exchange virtual directory and I can log in to the OMA now. ... Why did you create another 'Web site identifier'? ... necessary when using front-end servers. ...
    (microsoft.public.exchange.setup)
  • Re: Running more than one service on one box
    ... your servers, and you may find yourself in good shape. ... while dedicating a separate box as an ... > does web, mail, and DNS. ... > their access and starts messing with the web site, ...
    (Security-Basics)
  • Re: Page can not be display.....cannot find server or DNS error
    ... and thinking rebooting the servers help ... site this morning, after digging around, using tracert on the web site ... reboot the servers and see what happens. ... All updates have been downloaded and installed on the ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Page can not be display.....cannot find server or DNS error
    ... Just to let you know---Even though I was able to get to the web site that we ... and thinking rebooting the servers help ... reboot the servers and see what happens. ... All updates have been downloaded and installed on the Workstations. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)

Loading