Re: [LUG] Which OS/Distro for secure production web server

[kevin bailey <kbailey@xxxxxxxxxxxxxxxxxxx>]

Tom Salmon wrote:

> Roland Tarver wrote:
>
> > Hi!
> >
> > Just wondering which OS/Distro people would choose for a _secure_ web 
> > server
> > that will continue to be supported long into the _future_? It'll be 
> > running
> > Apache 1.3 (unless there is a strong argument for using apache 2 yet?)
> >
> > - Debian, or
> > - FreeBSD, or
> > - Redhat, or
> > - anything else (you choose!)
>
> My choice would be Debian. Not only rock solid, but apt will make 
> keeping up with patches as easy as:
> apt-get update
> apt-get upgrade


and of course - these two commands can be put into a script file and run 
automatically every night using cron - if there are security alerts a 
patch usually gets released within 1/2 days.  i have read about alerts 
and then checked only to find that the patch has already been installed!

kev

> Whatever distro you use, make sure you have a good iptables/ipchains 
> script for firewalling everything that isn't required.



--
The Mailing List for the Devon & Cornwall LUG
Mail majordomo@xxxxxxxxxxxx with "unsubscribe list" in the
message body to unsubscribe.