Re: [Security-Discuss] mdv 2006 lifetime

* Bob Puff <bob-6dd4Sf22++lWk0Htik3J/[email protected]> [2005-10-18 08:01:48 -0400]:

> > Oh, and Bob, if you're planning on using LE2005 for your servers because
> > 2006 is "missing stuff" (which it isn't) then you'll find when 2007 
> > is out and you haven't upgraded, and 2007 is also "missing stuff" 
> > you may need to find someone to build your updates for you.  In 
> > which case you'd be better off using Corporate Server with has lots 
> > of "stuff" and is also supported for 5 years.
> 
> Yes, I'm doing just that for internet servers.  (And FWIW, CS 3.0 is missing a
> SNMP server on the disks - at least as far as URMPI is concerned.  Thankfully,
> its in the updates.)
> 
> However, I was referring to servers that I set up for small companies that
> never actually see the internet.  Small workgroups that share files, printers,
> etc.  I bring cd sets, install, configure, then it's done.  So far I've not
> had to do updates, because everything worked fine out of the box.  Security
> threats aren't, because of no direct access to the internet.  So now, we're
> missing a FTP server.  Will Samba-server be the next one axed?

I highly doubt samba would ever be removed.... samba is pretty much a
core thing.  And these systems have absolutely no access to the internet
whatsoever?  Everyone works unconnected in a closet?  I find that odd
(could very well be true, just odd these days).

Anyways, download the FTP server and stick it on a USB keychain drive
and install it.  Solved.

> I did see a comment you made regarding other FTP servers, and how you wouldn't
> like it if proftpd were the only one provided.  I've never seen other ftp
> servers in any of the 9.x or 10.x installs!  If they were there, I don't
> recall seeing them in the package list that you select during installation.

You'd actually be surprised by what doesn't show up in the install list.
Point in fact, I don't think I've ever seen gkrellm show up in there
(and if it is, it's very cleverly hidden since I always do a individual
package selection and I'm *always* installing gkrellm on the first live
boot).


-- 
"lynx -source http://linsec.ca/vdanen.asc | gpg --import"
{FEE30AD4 : 7F6C A60C 06C2 4811 FA1C  A2BC 2EBC 5E32 FEE3 0AD4}

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)

iD8DBQFDVTowLrxeMv7jCtQRAhGuAJ42r7+oXJ7gsjAFIXYPdzVqS+Fh7ACfWo8C
nrXKdxm48IOgXWUOginQPkQ=
=yCMh
-----END PGP SIGNATURE-----