Very Computer

I'm considering switching from Linux to OpenBSD for the added security. One question:
How do Java servlets fare under OpenBSd? Does anyone here have experience
working with them. I have to support a web server that uses them heavily.

Thank you!

Open BSD makes the best firewall.  As far as a webserver, either Linux
or FreeBSD has more capabilities.  I would just add a Open BSD firewall
in front of your webserver.
Smitty

Quote:> Open BSD makes the best firewall.  As far as a webserver, either Linux
> or FreeBSD has more capabilities.  I would just add a Open BSD firewall
> in front of your webserver. Smitty

Thanks for your response. Unfortunately:

1. I'm at a university where we barely have enough resources for a machine on my
desktop, much less a separate one to act as a firewall.

2. Students have to be able to access my web pages, and they live all over the place
and use several ISP's.

So, it looks as though I either have to have a system that is fairly secure in its own
right or switch back to Linux and accept being hacked (I could harden the Linux up
a little).

I've downloaded JDK 1.1.8 for FreeBSD and it appears to work. I'll try to set up
ApacheJSS with it.

Thanks for the suggestions.

Justin Smith on 08/18/2000 12:10 PM scribbled:

Quote:> So, it looks as though I either have to have a system that is fairly secure in
> its own
> right or switch back to Linux and accept being hacked (I could harden the
> Linux up
> a little).

Try the Bastille-Linux hardening script.  By all accounts, it does a pretty
good job of locking down Linux.  It still isn't OpenBSD, but it's pretty
good.

Free download of the script, version 1.1 from here:

http://www.bastille-linux.org/

Luke Seubert

Thank you! If I go back to Linux, I'll do this. So far, I've managed to install
FreeBSD JDK 1.1.8 (under emulation) and ApacheJServe 1.1.2 and they appear to
work perfectly.

I've also found that many apps  compile "out of the box" on my machine
(emacs 20.7 and Postgres 7.0.2 --- even in cases where the official ports CRASHED).
This is a tribute to the portability of GNU software.

It's a bit more inconvenient to have to compile almost
everything from scratch, but so far...

My next challenge is to build helix-gnome...

Give us a break, will ya?  OpenBSD makes the best of everthing
particularly because its security features.  And firewall, Sir,
is only one of the many added functionalities provided by others
but tightly integrated with OpenBSD.

In case you dont know, a rooted system with "more capabilities"
as you advocated, which is pretty easy and common if you did your
research prior to this posting, is worse than using Win 3.1.

Nobody bothers to respond to you because you are pittifully
underinformed.  I respond to you because its Saturday.

Quote:>Open BSD makes the best firewall.  As far as a webserver, either Linux
>or FreeBSD has more capabilities.  I would just add a Open BSD firewall
>in front of your webserver.
>Smitty