Re: Mac as web server (was: Re: Web Site Hacks)

["James W. Abendschan" <jwa () jammed com>]

On Mon, 8 Dec 1997, John Gibbins wrote:
> > Web servers are among the most dangerous critters out there.  You really
> > want to protect your major assets from them, because they *will* be
> > penetrated.
>
> We have someone that insists that if the Web server is a Mac then
> there is no issue with security.  Although most vulnerabilities I see
> mentioned are UNIX or PC specific, I don't feel completely comfortable
> with this.  
>
> Are there any specific issues that relate to making a Mac web server
> secure?  We plan to set up a Mac server with FileMakerPro databases
> that will be accessed via the web.  No doubt various applescripts will
> be added as well.

Do *not* run AppleShare IP.  (All you firewall-wizards are filtering 543/tcp
anyway, right?)

AppleShare IP (aka ASIP) is Apple's network file system over TCP/IP.
If a UNIX ASIP client is ever publicly released, we'll see NFS and SMB
all over again..

James

--
James W. Abendschan           jwa () jammed com          http://www.jammed.com/
               In the time of chimpanzees I was a monkey  -- Beck