Text 1798, 48 rader
Skriven 2004-12-17 11:03:46 av Chip Hearn (1:3613/52)
   Kommentar till text 1795 av MARTIN ATKINS (1:123/140)
Ärende: Mandrake 10.1
=====================
  Re: Mandrake 10.1
  By: MARTIN ATKINS to BEN RITCHEY on Fri Dec 17 2004 10:07 am

 > Prior to my present setup i had Mandrake 9.0, far more stable than 10.0.
 > I've found with these RPM setups that upgrading can cause a lot of problems
 > so i always go for a complete install but for some i imagine this would be a
 > lot of aggravation. Just to satisfy my curiosity can i ask what applications
 > you found incompatible with Mandrake 9.2?

Dude, I would highly suggest you not do full installs.  An incident I
encountered shows what a mistake that is.

I had hired a RH certified individual.  I had a job come up where the client
wanted a Linux server to run a program called Medical Manager.  Anyway, this so
called RH Certified person was put on the task of building the machine.  It was
stressed that it didn't need everything, as the server was going to have dumb
terminals connected via serial.  Anyway, things went on, the system was built,
and installed.  A couple of months later, I get a frantic call from the client.
They can't connect to their server.  The employee that set it up was at another
client, so I went to see what was going on.  Now, understand, I'm not RH
Certified, just a long time Linux user myself.  Anyway, I found that the box
had been rooted.  Eventually, after a bunch of checking, and work, I was able
to get enough info to figure out what had occured.  Some Warez group had hacked
into the machine, in the easiest way possible.  Turns out that my Employee,
when he had built the RH box, had done a full install.  There was some stupid
web interface thing that having not be configured, was still using the default
username and password.  This web interface thing was a remote administrator
access port.  Its installed when you do a full install.  Oh, instead of
another one of my normal setups, the Employee had also changed the router,
instead of opening the specific ports I specified, he had basically setup
the server in a DMZ.  But the main portion, no one had gone through all the
Installed programs and made sure they were either not running or diabled
access, or changed the passwords.  

Anyway, I'd be very careful about your system.  You have no idea what all was
installed.  Very dangerous.


Sniper
Killed In Action BBS, telnet://kia.zapto.org
Home of the Unofficial SynchroNet Support Network.
download the info pack at either of the below sites:
http://www.chcomputer.net/USSNET.ZIP
http://www.ussnet.org
telnet://kia.zapto.org

--- SBBSecho 2.00-Win32
 * Origin: Killed in Action BBS  telnet://kia.zapto.org (1:3613/52)