Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 31 Jul 2005 11:18:28 -0400
From:      Jeff <jeff.dyke@gmail.com>
To:        questions@freebsd.org
Subject:   dmz server setup - opinions
Message-ID:  <42ECEBC4.3020605@azimapower.com>

next in thread | raw e-mail | index | archive | help
I realize this may be partial religion and then potentially bias due to the list 
but here goes anyway.

I need to build a DMZ server, of sorts, that will sit on the public internet. 
It will take in data from embeded devices and in turn services from behind a 
firewall will pull data from it to later process.  The main processes that i 
need to run are ftpd,httpd, possibly smtpd(sasl2,tls), and later proprietary 
code that talks to the embeded devices.

Originally i was thinking of using OpenBSD, as it seems to lend itself very 
nicely to the public but secure environment.  On the other hand, if i were to 
use FreeBSD, i could jail each process, granted i could also chroot each process 
in OpenBSD and httpd is already done for me.

I will be running a firewall on the box either way and will also have sshd and 
rsyncd running, only allowing access from the internal network.

I have move expierence with freebsd, but my limited knowlegdge based on an 
install and configuration of openbsd3.7 has made me comfortable with it as well.

Any opinions on which OS is better suited for the task?  Security and reliablity 
are the foremost concers( aren't they everyones ) and i think both OS are more 
then up to the task.

Thanks for any input.
jeff





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?42ECEBC4.3020605>