> I have to disagree -- AIX is better choice solely because SunOS 4.1.X is
> sooo far out of date. It takes hundreds of patches, and replacement of
> most system utilities, to bring a SunOS box up to anything close to a
> secure state. I'm no great fan of IBM, but at least they dont ship
> systems with the sendmail debug hole.
I am no great fan of Sun Microsystems, but they don't ship systems with
rexd procedure running by default, unlike IBM does, and if you ever bothered
to look at networking code of AIX, you'd find out that it's totally broken,
it's a lost case to use an AIX as a bastion host, sorry.