From owner-freebsd-chat Tue Feb 4 3:59:15 2003 Delivered-To: freebsd-chat@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3D11837B401 for ; Tue, 4 Feb 2003 03:59:14 -0800 (PST) Received: from rambo.401.cx (rambo.401.cx [80.65.205.166]) by mx1.FreeBSD.org (Postfix) with ESMTP id 576B643FC7 for ; Tue, 4 Feb 2003 03:59:13 -0800 (PST) (envelope-from listsub@401.cx) Received: from 401.cx (132.dairy.twenty4help.se [80.65.195.132]) by rambo.401.cx (8.12.6/8.12.6) with ESMTP id h14BvdP8033938; Tue, 4 Feb 2003 12:57:39 +0100 (CET) (envelope-from listsub@401.cx) Message-ID: <3E3FAB05.9070808@401.cx> Date: Tue, 04 Feb 2003 12:59:01 +0100 From: "Roger 'Rocky' Vetterberg" User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.0.2) Gecko/20021120 Netscape/7.01 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Dag-Erling Smorgrav Cc: chat@FreeBSD.ORG Subject: Re: Good PR References: Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Sender: owner-freebsd-chat@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Dag-Erling Smorgrav wrote: > These stats are good news for *BSDers: > > > > The only thing that worries me is that with an uptime that long, they > must be running a FreeBSD version with known security holes... > > DES AFAIK, they are all webservers. A webserver protected by a firewall and not running any services besides httpd does not necessarily need to be patched for other exploits then those affecting httpd. Im not saying its the right way to run a server, but in theory a server running only httpd can safely ignore bugs in sshd, bind, sendmail or whatever. Patching httpd does usually not require a reboot so a fully patched httpd can still run on a system with very long uptime. To avoid flames, let me assure you that none of my servers have more then ~50 days uptime since I frequently patch and even reinstall them. -- R To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-chat" in the body of the message