Not doing patching properly? Ermmm as noted the majority of patches now no longer need a reboot, so it is quite believable that a server has a higher uptime of 91 days (in fact you should aim higher) etc and you could have a fully patched server, also remember that Microsoft releases patches every second Tuesday of each month as a matte of course pro(and re) actively, and not all patches are necessary for a given config.
"This e-mail is from Reed Exhibitions (Gateway House, 28 The Quadrant, Richmond, Surrey, TW9 1DN, United Kingdom), a division of Reed Business, Registered in England, Number 678540. It contains information which is confidential and may also be privileged. It is for the exclusive use of the intended recipient(s). If you are not the intended recipient(s) please note that any form of distribution, copying or use of this communication or the information in it is strictly prohibited and may be unlawful. If you have received this communication in error please return it to the sender or call our switchboard on +44 (0) 20 89107910. The opinions expressed within this communication are not necessarily those expressed by Reed Exhibitions." Visit our website at http://www.reedexpo.com -----Original Message----- From: Russ To: CF-Talk Sent: Sun Jan 21 06:05:13 2007 Subject: RE: Apache config > -----Original Message----- > From: Dave Watts [mailto:[EMAIL PROTECTED] > Sent: Saturday, January 20, 2007 3:25 PM > To: CF-Talk > Subject: RE: Apache config > <snip> > > As for the whole open source argument, no, IIS nor third-party IIS tools > are > open source. For something that is essentially a commodity, like a web > server, I have never needed the ability to edit the source, I wouldn't be > qualified to edit the source, and I suspect that this is true for many of > the people on this list. Out of curiosity, are you an Apache committer? If > you're not, have you made changes to the Apache source? If you do make > changes, what do you do when a new version comes out? How are you any > better > in this respect than the "one man companies" you mention above? > I am not an Apache committer, and I would not be qualified to be one. I do know that there are thousands of eyes looking at the Apache source and finding bugs and vulnerabilities. I do upgrade my Apache versions from time to time, and I do it more often if a serious vulnerability is found. Unlike Windows, however, this is not very often. On linux, apache gets automatically updated between minor versions as part of the nightly update. > > Ok, maybe not so simple, but once you get the hang of it, you > > can feel the power. Just like using linux for servers > > instead of windows. It takes time to learn how to administer > > it, but once you do, you'll never go back. For one thing you > > won't have to worry about monthly security patches. They > > silently download at night without ever needing a reboot. My > > Linux server has been up for 91 days. People have their > > servers up for years at a time without rebooting. Can you > > say the same about windows? > > Actually, the vast majority of Windows patches no longer need a reboot, > and > if you think 91 days is an impressive uptime number, well, I'm sorry to > say, > but most of my Windows servers have higher uptime than that. > Vast majority is not all. I have my servers set to auto reboot when windows patches come out, and they have been rebooting on a monthly basis. The last time they rebooted was 12/17. If your servers have a higher uptime then 91 days, you must not be doing your job of patching server very well. Now I said my Linux server has an uptime of 91 days. The only reason it's so small, is because I was probably having some issue, and still have the preconceived notion from the Windows world that a reboot usually fixes things. If I didn't reboot manually, I would've had a much higher uptime, and as I've mentioned, I have seen Linux servers with uptimes measured in years, all while receiving nightly updates. Russ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Upgrade to Adobe ColdFusion MX7 Experience Flex 2 & MX7 integration & create powerful cross-platform RIAs http:http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:267077 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
