speedline
06-07-2001, 02:59 AM
I'm looking for backed up info about the comparisons on linux 6.2 - 7.2 security and stability features AS A SERVER. I need to do multi domain hosting on one ip and want the most secure OS to do so, please be ready to back any info with links, books or any other published proven facts.
Voodoo Web
06-07-2001, 03:38 AM
You mean RedHat Linux?
Because Linux don't have version numbers like 7.2.
The kernel has a version number but this is anywhere around 2.
I think the newest release is the most secure because it contains all prior security patches.
Maybe a search on this forum will help you.
- domi
speedline
06-07-2001, 03:46 AM
I want to clear up the confusion I am talking about redhat linux 6.2 vs 7.0 - 7.2
cirrusrex
06-07-2001, 10:08 PM
It seems to be that redhat 6.2 is probably your best bet. Its been around for a while and if you run the latest kernel and keep all of your stuff up to date its a pretty secure (and stable) OS. I would personally shy away from redhat 7.2 because it is brand spanking new (well - almost) so it hasn't been fully tested. Personally I would suggest running Debian GNU/Linux or a BSD (Open or Free) if you can help it.
allnightadmin
06-08-2001, 04:53 PM
Lets clarify this a little
I am speedlines partner and what we need to know is what does every one like to use for a server OS and why, especially as far as security is concerned. Some one who has been helping my partner speedline has told him that red hat 7.0 is baaaaaaad, to many back doors to many security problems etc. Well, this got my attention because I have a MAJOR website on a server running red hat 7.0 and simply CAN NOT afford to build this website up on a second rate OS that has these types of problems. I have asked speedline to ask this individual to give details and back his statement up with evidence and facts.
BUT since we have been reading this forum we have noticed how many knowledgeable people there are who post here and we were hoping to get some facts instead of unsupported rumors and innuendo. If you think a particular OS is bad say so but please back it up with details or info that we can research. If you talk of security problems give facts details and suggestions. Also if any one can suggest books or web sites were we can go to learn about securing web servers please let us know. A quick list of obvious things to do and not do would be a good start.
OS's that we are using:
Cobalt RaQ 2 plus: for small web sites and email.
Red Hat 7.0:
Server OS used for a major biz venture web site!
Red Hat 6.2:
Need to do name based virtuals and been told to use this OS
Current e-smith release:
Playing with this trying to see if it will do name based virtuals and work as a mail server for us.
We are having trouble getting this set up to do remote admin since we will eventually want to place it
in a local hosting facility we are partnering with now for bandwidth sharing purposes.
Red Hat 6.2 with Ensim set up on a customers server.
This is a new one for us, not much experience yet. We are considering this for one of our servers also as it seems with this we can have a control panel for our customers if we do bulk hosting. Right now we mostly do local business websites where we totally manage every aspect of the web site for our customers. Plus this would mean no more cobalts.....yuk! much too expensive for what you get, I can put together servers ten times as powerful for much less money.
Does any one know anything about Caldera eServer 2.3 ? or freeBSD? We have been considering these also.
The bottom line is we are still learning about Linux, we can get the OS up and running and get it to the point of being online and serving web sites but we do not know enough about how to lock it down security wise or how to tell really what flavor of Linux is best yet.
Thanks to every one who post on webhostingtalk and helps people like us, we appreciate it more then we can adequately express.
Question, How many of you are running a regular install of your Server OS without doing anything more to enhance security?:D
thewebbie
06-08-2001, 10:50 PM
Quite frankly the argument that one os is more secure than another is crap. The OS is only as secure as you make it. Anyone doing a install straight off the CD with out any hardening might as well put a loaded gun to their mouth and pull the trigger.
You can say that one OS is more secure becuase it installs less or that it turns more items off etc... etc... etc.. The facts are that you are vulnerable until you take proactive actions and LOCK DOWN YOUR BOX!
With that out of the way.. You can make any xNIX OS very secure but not perfect... A hacker will get in eventually if you give them the chance.
As far as stability and piece of mind? I suggest Red Hat 6.2 with all eratta and All INET services disabled. Use SSH to make your connections and do not run useless daemons like portmap, xfs, apmd, gpm etc..
Check out this site for great linux security links.
http://securityportal.com/research/research.linuxsecurity.html
Learn the facts and how the hackers and script kiddies do their job... Follow simple guidelines and build a security policy into your daily routine.