G.W. Haywood wanted us to know:

>And you're not nervous about running a Linux distro that old?
>That would make *me* very nervous.
>Do _everyone_ a favour and install a more recent distro.

Old distros are ok under controlled circumstances.
1) Firewall all listening ports to the Internet except the one or two
that are Internet facing (port 80 and 25 are common).  Use source for
the apps that are serving those ports instead of distro supplied apps.
2) App is sitting behind a reverse proxy with a private IP.  Use source
for the apps that are serving those ports instead of the distro supplied
apps.

There's a pattern there.  Discerning sysadmins will see it.

Disclaimer:  I'm not advocating it.  I'm simply agreeing there are
scenarios where it's more disruptive to upgrade the OS (breaks homegrown
apps) than to just upgrade the individual apps and rely on other methods
of insulating the OS from the "big bad mean world".
-- 
Regards...              Todd
OS X: We've been fighting the "It's a mac" syndrome with upper management
for  years  now.  Lately  we've  taken  to  just  referring  to  new  mac 
installations  as  "Unix"  installations  when  presenting proposals  and 
updates.  For some reason, they have no problem with that.          -- /.
Linux kernel 2.6.12-12mdksmp   2 users,  load average: 0.03, 0.05, 0.09
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html

Reply via email to