[rescue] Uptime war (Was: STOP THE INSANITY)

[Curtis H. Wilbar Jr.]

>From: Mattias Nordlund <mathew at eagle.y.se>
>
>On Wed, 18 Jun 2003, Frank Van Damme wrote:
>
>> On Tuesday 17 June 2003 22:58, Mattias Nordlund wrote:
>> >
>> >  10:58pm  up 843 day(s),  7:24,  1 user,  load average: 0.03, 0.01, 0.02
>> >
>> > (Solaris 8, SPARCstation 5, production mailserver)
>>
>> Now THAT is what I call stability... Did solaris not have any security holes
>> in the kernel in all that time?
>
>Probably, but as it only is used as mail-server with postfix, and
>is firewalled so only open port from the internet is port 25.
>
>Then all users read mail localy on other machines that have NFS mounted it
>or over imap (not from the internet)

What protection do you have against NFSshell ?  Around 6 years ago when
I was at a regional ISP, we eliminated NFS to the mail server and went
with an undocumented IMAP (using pine's master config to reference the
IMAP server).  Anyone using something other than pine from the shell
server no longer had e-mail access... but that was only a couple of
people.  There was too much rampant abuse of NFS and eliminating it was
the easiest thing.

-- Curt

>
>And there is no login for ordinary users on it, and hardly any
>suid-binarys left.
>
>/Mattias
>_______________________________________________
>rescue list - http://www.sunhelp.org/mailman/listinfo/rescue


Curtis Wilbar
Hawk Mountain Networks
rescue at hawkmountain.net

My e-mail is protected against viruses and spam by MailGuardian
                  http://www.mailguardian.net
          Top notch protection at unbelievable prices