From owner-freebsd-questions Sun Jan 17 18:47:43 1999 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id SAA21226 for freebsd-questions-outgoing; Sun, 17 Jan 1999 18:47:43 -0800 (PST) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from peacock.tci.com (coral.tci.com [198.178.8.81]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id SAA21221; Sun, 17 Jan 1999 18:47:41 -0800 (PST) (envelope-from chris@tci.com) Received: from oreo.tci.com (co-chris-pc01.tci.com [172.18.27.65]) by peacock.tci.com (8.9.0/8.9.0) with ESMTP id TAA21993; Sun, 17 Jan 1999 19:47:33 -0700 (MST) Received: from tci.com (localhost [127.0.0.1]) by oreo.tci.com (8.9.1b+Sun/8.9.1) with ESMTP id TAA01605; Sun, 17 Jan 1999 19:47:14 -0700 (MST) Message-ID: <36A2A0B2.8C150360@tci.com> Date: Sun, 17 Jan 1999 19:47:14 -0700 From: Chris Tubutis Organization: Tele-Communications, Inc. X-Mailer: Mozilla 4.5 [en] (X11; U; SunOS 5.7 sun4m) X-Accept-Language: en MIME-Version: 1.0 To: Shawn Ramsey CC: "John A. Hengstler" , bahwi , freebsd-questions@FreeBSD.ORG, freebsd-isp@FreeBSD.ORG Subject: Re: FrontPage questions References: <36A27AE5.BEF6CE5B@tci.com> <19990117172044.A17831@cpl.net> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Shawn Ramsey wrote: > > > It amazes that people would even *think* of infecting a perfectly good, > > usable UNIX system with a Redmond "product." I run several Web servers > > where I work, and I explicitly and intentionally keep that crap far away > > from 'em. > > I don't like em anymore than the next guy... but if customers are banging > down your door for Frontpage support, what are you supposed to do? Yeah, I thought about this after I sent that message. Please, nobody take any offense at what I said; I certainly didn't mean to imply any. I'm kind of lucky in that my "customers" are all employees and don't really have much of a choice in the matter. I have to work in my employer's best interests. Luckily, Redmond makes it pretty easy for me to act the way I do. The security and interoperability considerations of using the FP stuff were simply too great for me to start using them without some fairly hefty changes in infrastructure design and operation. Anyway... it seems that you don't really have too much of a choice (aside from maybe putting up a stronger door :). IIRC, the FP stuff is used only during site development and management operations, and aren't needed or used in everyday Web serving. Regardless, if I had to use the stuff, I'd set up a separate environment exclusively for hosting the web server(s) that have been infected, then perhaps mirror the resulting content on uninfected servers. You can use virtual servers, URL forwarding and mod_rewrite to make things appear to be coming from anywhere you'd like. This leads back to the *original* problem - the stuff ain't working any more. *sigh* Things get so much more difficult when there's money involved. ct -- Chris Tubutis | Tele-Communications, Inc. TCI Advanced Information Technology | AIT - Internal Networks (303) 267-7503 | 5970 S. Greenwood Plaza Blvd. tubutis.chris@tci.com | Englewood, CO 80111-4713 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message