Date: Tue, 28 Dec 1999 08:26:17 -0800 From: "Kurt D. Zeilenga" <kurt@boolean.net> To: Robert Watson <robert+freebsd@cyrus.watson.org> Cc: freebsd-security@freebsd.org Subject: Re: bjorb vs sslproxy vs stunnel Message-ID: <3868E4A9.2290E82@boolean.net> References: <Pine.BSF.3.96.991228095337.46232A-100000@fledge.watson.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Robert Watson wrote: > Don't have any experience with bjorb or stunnel, but I do remember finding > that sslproxy doesn't correctly reap fork()'d zombie children, resulting > in large numbers of zombies on a production machine. This was a couple of > months ago, so it may have been fixed since then, but it wasn't very > entertaining. You might also consider SSH for tunneling if you allow > users to have accounts on your machine (i.e., SSH requires them to log in > before providing tunneling services) -- this is a common arrangement with > CVS where they will need to authenticate anyway. We don't allow logins to the system providing the CVS master repository. > I hope to give stunnel a > try shortly in the hopes that it is better than sslproxy :-). To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3868E4A9.2290E82>