Hello Ronald,

Monday, April 25, 2005, 12:13:19 PM, you wrote:
RK> My experience with IIS is if you have high available bandwidth hackers
RK> will find a way to get control of your machine, no matter how many
RK> patches are applied, security rollups are run, and having a world class
RK> firewall in front of your machine.  They will get in then use your
RK> machine in a DoS attack.

RK> To require IIS for webmail is opening up many more machines that 
RK> currently are off the radar.

RK> You should be comparing a Ferrari with four bald tires against a well
RK> maintained Lamborghini. One is a ticking time bomb, the other does what
RK> it's supposed to do and doesn't give up on you when you need it the most.

I work for a very high exposure hosting company, and I have had 2
windows boxes compromised in the last 2 years, both were because SQL
was not fully patched in install (we installed from a CD that did not
even have SP1), both very easily fixed.  In that same time span I have
had around 20 linux boxes compromised through various exploits. PHPBB
was a big bear, only the absolutely latest version is not vulnerable,
PHP code can make your box a hackers playground very quickly, there
are even PHP based virtual terminals your customers can upload to your
hosting servers, just one rung in the ladder to root kitting the box.

-- 
Best regards,
 Charles                            mailto:[EMAIL PROTECTED]



To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to