[rescue] Uptime war (Was: STOP THE INSANITY)

Curtis H. Wilbar Jr. rescue at hawkmountain.net
Wed Jun 18 10:05:56 CDT 2003

>From: Mattias Nordlund <mathew at eagle.y.se>
>On Wed, 18 Jun 2003, Frank Van Damme wrote:
>> On Tuesday 17 June 2003 22:58, Mattias Nordlund wrote:
>> >
>> >  10:58pm  up 843 day(s),  7:24,  1 user,  load average: 0.03, 0.01, 0.02
>> >
>> > (Solaris 8, SPARCstation 5, production mailserver)
>> Now THAT is what I call stability... Did solaris not have any security holes
>> in the kernel in all that time?
>Probably, but as it only is used as mail-server with postfix, and
>is firewalled so only open port from the internet is port 25.
>Then all users read mail localy on other machines that have NFS mounted it
>or over imap (not from the internet)

What protection do you have against NFSshell ?  Around 6 years ago when
I was at a regional ISP, we eliminated NFS to the mail server and went
with an undocumented IMAP (using pine's master config to reference the
IMAP server).  Anyone using something other than pine from the shell
server no longer had e-mail access... but that was only a couple of
people.  There was too much rampant abuse of NFS and eliminating it was
the easiest thing.

-- Curt

>And there is no login for ordinary users on it, and hardly any
>suid-binarys left.
>rescue list - http://www.sunhelp.org/mailman/listinfo/rescue

Curtis Wilbar
Hawk Mountain Networks
rescue at hawkmountain.net

My e-mail is protected against viruses and spam by MailGuardian
          Top notch protection at unbelievable prices

More information about the rescue mailing list