Re: [TCLUG:17303] FreeBSD

[Eric F Crist <ecrist@ardent-hacker.net>]

Not feasable to just replace the packages.  I want to start from scrap,
becuase, as I've said before, that I'm still a newbie and I need to have
something that's going to be secure from the start.

I've been debating between FreeBSD and Debian.

FreeBSD, I've heard is a much more secure OS with many, many, packages included
on the installation CD-ROMs.  

Debian, I'm understanding is a very simplistic OS to upgrade (one command for
ALL upgradable packages.)  Debian is also a better OS for server side apps.

I don't yet know all the possible security holes and I need to start paying
attention to what ports and programs are secure.  One major problem is that I'm
at a static location on the internet.  I have a dynamic IP, but I have a static
web address (ardent-hacker.net).

Oh well, I'm thinking I'm going to go with FreeBSD and start from scratch and
do some learning.  


Eric F Crist
aka Slinky

PS:  Yes people, I WILL RTFM!


On Sun, 07 May 2000, you wrote:
> Mostly command line flags and /etc structure.
> Not a difficult change over at all.
> 
> But wouldn't it be easier to just replace the offending applications?
> 
> A new build of the latest ssh, replace your ftpd with bsd-ftpd,
> latest Apache, and kill telnet and the other ports should work.
> 
> Of course since you have been cracked already the complete rebuild
> necessary to go to BSD is probably a good idea.
> 
> Daniel Taylor                Embedded and custom Linux integration.
> dante@plethora.net           (612)747-1609
> 
> On Sat, 6 May 2000, Eric F Crist wrote:
> 
> > Alright, I don't know if this is supported by this group, but since it's a
> > linux derivative, I'm assuming it is. 
> > 
> > I am currently running Caldera OpenLinux (BrokenLinux to the rest of us) and am
> > running a small-time webserver on the system.  In the last three weeks, I have
> > been hacked into 7-10 times, unless I close www, ftpd, telnet, ssh, and some
> > other ports.   Now, if I"m running a web server, it doesn't do me any good to
> > close many of these ports.  
> > 
> > As it turns out, I'm getting hacked because of some well known exploits in my
> > version of OL (2.3).
> > 
> > Thus, I have decided to move to FreeBSD 4.4 (I think that's the version that's
> > out right now.).
> > 
> > I was wondering if somebody could tell me some MAJOR differences (besides file
> > locations) between standard linux and a BSD derivative.
> > 
> > Would be appreciated.
> > 
> > Eric F Crist
> > 
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: tclug-list-unsubscribe@mn-linux.org
> > For additional commands, e-mail: tclug-list-help@mn-linux.org
> > 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tclug-list-unsubscribe@mn-linux.org
> For additional commands, e-mail: tclug-list-help@mn-linux.org