[Zope] Re: Zope behind iis

2006-08-24 Thread Max M

Philip Kilner wrote:

Hi Chris,

Chris Withers wrote:

Personally, I'd just put Apache in front of both Zope and IIS...


Me too - simpler, better documented, safer.

(Having seen a server wiped out via an IIS security hole, I just don't
trust it on a public IP - long time ago, but once bitten, twice shy!)



Hmmm ... then try making a mistake in your apache httpd.conf and turn on 
proxy by mistake.


--

hilsen/regards Max M, Denmark

http://www.mxm.dk/
IT's Mad Science

Phone:  +45 66 11 84 94
Mobile: +45 29 93 42 96

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Re: Zope behind iis

2006-08-24 Thread Philip Kilner
Hi Max,

Max M wrote:
 (Having seen a server wiped out via an IIS security hole, I just don't
 trust it on a public IP - long time ago, but once bitten, twice shy!)
 
 Hmmm ... then try making a mistake in your apache httpd.conf and turn on
 proxy by mistake.
 

Sure - but I'm much more worried about mistakes that others have made
that I could not possibly know about. Within limits, I can do something
to manage my own risk, and in any event it is my responsibility - but I
don't want to buy an unquantifiable risk off someone else.


-- 

Regards,

PhilK

Human language continually changes, innit.
- Stephen Juan
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )