From owner-freebsd-questions@FreeBSD.ORG  Mon Sep 27 05:56:18 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id EA4AA16A4CF
	for <freebsd-questions@FreeBSD.ORG>;
	Mon, 27 Sep 2004 05:56:18 +0000 (GMT)
Received: from mta10.srv.hcvlny.cv.net (mta10.srv.hcvlny.cv.net
	[167.206.5.85])	by mx1.FreeBSD.org (Postfix) with ESMTP id B16B043D3F
	for <freebsd-questions@FreeBSD.ORG>;
	Mon, 27 Sep 2004 05:56:18 +0000 (GMT)
	(envelope-from bsdfsse@optonline.net)
Received: from [192.168.0.28] (ool-43532b7b.dyn.optonline.net [67.83.43.123])
 by mta10.srv.hcvlny.cv.net
 (iPlanet Messaging Server 5.2 HotFix 1.25 (built Mar  3 2004))
 with ESMTP id <0I4O002Z7R5TZ6@mta10.srv.hcvlny.cv.net> for
 freebsd-questions@FreeBSD.ORG; Mon, 27 Sep 2004 01:56:18 -0400 (EDT)
Date: Mon, 27 Sep 2004 01:56:27 -0400
From: bsdfsse <bsdfsse@optonline.net>
To: "freebsd-questions@FreeBSD.ORG" <freebsd-questions@FreeBSD.ORG>
Message-id: <4157AB8B.2020007@optonline.net>
MIME-version: 1.0
Content-type: text/plain; charset=ISO-8859-1; format=flowed
Content-transfer-encoding: 7BIT
X-Accept-Language: en-us, en
User-Agent: Mozilla Thunderbird 0.8 (Windows/20040913)
Subject: Is it safe to run a webserver on 5.x ?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 27 Sep 2004 05:56:19 -0000


I started running FreeBSD because a friend of mine is going to run a 
website on 4.10-STABLE.  Someone had told him that 4.x was "safer" to 
run than 5.x.

Recently I had a hardware problems on one of my machines that is forcing 
me to run 5.x on it, instead of 4.x.  Should I lobby my friend to also 
run 5.x ?  His webserver will be behind a hardware firewall.

Its my understanding servers on the web often run the "security 
release", which is RELEASE+fixes.  That way, no new features in STABLE 
introduce more exploitable bugs.  Other people run web servers on STABLE 
(they must feel confident that nothing new is going to break).

After reading different places on the web, I haven't been able to draw a 
conclusion.  Any suggestions?

Thx!