From owner-freebsd-security@FreeBSD.ORG  Thu Aug 11 16:12:30 2005
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
X-Original-To: freebsd-security@freebsd.org
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id AC9C016A41F
	for <freebsd-security@freebsd.org>;
	Thu, 11 Aug 2005 16:12:30 +0000 (GMT)
	(envelope-from arne_woerner@yahoo.com)
Received: from web41204.mail.yahoo.com (web41204.mail.yahoo.com [66.218.93.37])
	by mx1.FreeBSD.org (Postfix) with SMTP id 5547743D45
	for <freebsd-security@freebsd.org>;
	Thu, 11 Aug 2005 16:12:30 +0000 (GMT)
	(envelope-from arne_woerner@yahoo.com)
Received: (qmail 72114 invoked by uid 60001); 11 Aug 2005 16:12:30 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com;
	h=Message-ID:Received:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding;
	b=36Ax26purJ/eOkffnr4C9T+XpZC5dt9MXB2wN8hrQ2u38MQuI7JFa4HNM0xCewnml2ReJs4XtBZ4BSzCWdkkVbeL78g2peZDUCFya7+x7NtImOZZUyb2x5D5utdAUOXuR4j8rQActno0fmrwHV2N5zGIdiVLvMZgwlwp7nVC4w8=
	; 
Message-ID: <20050811161230.72112.qmail@web41204.mail.yahoo.com>
Received: from [213.54.91.124] by web41204.mail.yahoo.com via HTTP;
	Thu, 11 Aug 2005 09:12:30 PDT
Date: Thu, 11 Aug 2005 09:12:30 -0700 (PDT)
From: Arne "Wörner" <arne_woerner@yahoo.com>
To: Ken Hawkins <ken@rosewoodblues.com>, freebsd-security@freebsd.org
In-Reply-To: <32C41BA6-A923-4A01-B332-8B73E39561B1@rosewoodblues.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Cc: 
Subject: Re: newbie with www user security problem
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 11 Aug 2005 16:12:30 -0000

--- Ken Hawkins <ken@rosewoodblues.com> wrote:
> well here i come port fix hell! This is a production box
> and can't be taken off line as of this moment so i am
> going to have to attempt on the fly fixing / upgrading
> of the ports.  i would love to wipe it but it is just
> not a possibility right now.
> 
What about this plan (I call it alan-parson-project):
1. installing everything to a cold-standby box (new box)
2. testing if everything would work fine... :-)
(3. tranfering the database)
4. halting the production system
(5. transfering the brand new database updates)
6. making the new box the old box (by changing the IP or DNS or
so)...

-Arne

--
Arne likes Austin Powers and Mr. Anderson's black thumb nail in
The Matrix... ;-))


		
____________________________________________________
Start your day with Yahoo! - make it your home page 
http://www.yahoo.com/r/hs