Great Circle Associates Firewalls
(May 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: "Pre-configured" Sun systems...
From: bve @ yourtown . com (BVE)
Date: Thu, 9 May 96 14:45:13 EDT
To: firewalls @ GreatCircle . COM

I was reading some old postings (I was away for a time...), and I came across
some mention of the Netra.  The theory of the Netra is that it's easier to
initially configure as an Internet server machine.  They even give you a
Web-based admin tool to help you set it up.

I don't know whether this admin tool is any good, since I did not opt to use it
when our Netra arrived, but I have other beefs with this machine's setup.
My biggest problem is that the machine came with a 5.x version of Sendmail!  Am
I correct in assuming that this is an ancient version, or is this just one of
Sun's alternate numbering schemes??  If it's ancient, then I think Sun is
woefully at fault for allowing so many security holes to exist on a machine
aimed at "newbie" Internet server admins!

There are many other things about the configuration that I thought were
inappropriate for a "newbie" default, such as having rlogin and rsh active by
default.  What's more, they sell the machine with Netscape Communications
server, but it comes with sun_httpd (a bastard child of CERN and Apache pieces,
I think...) set up on port 80.  Netscape's server is tucked away in a directory
somewhere....

Easy to configure?  I guess that just depends on whether you want a reasonably
secure configuration....  Does anyone have any comments ... similar/different
experiences?? 


					-BVE
					(Bill Van Emburg)
					(bve @
 yourtown .
 com)
					(http://yourtown.com)
	"You do what you want, and if you didn't, you don't"


Follow-Ups:
Indexed By Date Previous: Stopping faked email
From: Peter J Churchyard <pjc @ trusted . com>
Next: 10k Vulnerable Web Servers?
From: Vin McLellan <vin @ shore . net>
Indexed By Thread Previous: Stopping faked email
From: Peter J Churchyard <pjc @ trusted . com>
Next: Re: "Pre-configured" Sun systems...
From: Squawk <discodan @ vampire . org>

Google
 
Search Internet Search www.greatcircle.com