RE: SendMail and DNS running on same Machine

["Benjamin Meade" <ben () lanwest com au>]

The only issue I can think of is that is an attacker gains access to
your server, then both your DNS and mail belongs to them, rather that
having only one compromised. Of course, if they were on separate
machines, then it is likely that if one was compromised, then the
attacker could go from one to the other without to much difficulty.
Still, it is an extra layer of security.

Benjamin Meade
Systems Administrator
LanWest Pty Ltd


-----Original Message-----
From: Martin Wasson [mailto:martin_wasson () mastercard com] 
Sent: Wednesday, 30 October 2002 4:38 AM
To: security-basics () securityfocus com
Subject: Re: SendMail and DNS running on same Machine


In-Reply-To: <1EB353E9CD23AA4EA92AC21C8681C05A01316536 () delta inamed com>


It's certainly no more nor less secure than running them on separate
boxes.
Neither are historically secure, but H.I.M. is right;  stay on top of
the
vulns discovered.  It doesn't matter if they're on the same partition,
physical disk, or in the same case.  Good luck to ya.