LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   FreeBSD or RedHat linux (https://www.linuxquestions.org/questions/linux-security-4/freebsd-or-redhat-linux-135830/)

secret_ident 01-17-2004 05:22 PM

FreeBSD or RedHat linux
 
I'm having a tough choice between FreeBSD and RedHat operating systems. I've heard good things about both, I currently use RedHat 9.0 but I am interested in starting a Shell Server Hosting company, to host shell accounts (ex: ircd) can anyone help me with making a decision and tell me which one is better for this hosting?

Thanks
Daniel T.

masinick 01-17-2004 09:11 PM

Re: FreeBSD or RedHat linux
 
Quote:

Originally posted by secret_ident
I'm having a tough choice between FreeBSD and RedHat operating systems. I've heard good things about both, I currently use RedHat 9.0 but I am interested in starting a Shell Server Hosting company, to host shell accounts (ex: ircd) can anyone help me with making a decision and tell me which one is better for this hosting?

Thanks
Daniel T.

One factor may make your choice a bit easier - official support for Red Hat 9 from Red Hat ends in April. Other vendors have indicated interest in supporting Red Hat 9 (Progeny comes to mind), but this may be one factor to consider.

Either system might make a decent choice, though the BSD systems tend to have a slightly better security track record. If you're using the system primarily for server hosting, you might even want to consider using OpenBSD, which has a terrific security record.

However, the differences aren't terribly great. You wouldn't go badly wrong with either choice, at least in my opinion.

For me, personally, I'd also consider putting together a Debian system. My biases are that I've become familiar with it, the system is conservative and also stresses strong security, it has excellent dependency management, so it is very easy to update.

secret_ident 01-17-2004 09:16 PM

well what would you recommend to use for a shell/irc/web hosting....

freebsd
openbsd
Debian

and please be honest

masinick 01-17-2004 09:29 PM

If I were doing it, I know Debian and I have no reservations about using it. In fact, I'm pondering putting together business plans of my own for various products and services centered around a Debian core set of systems.

secret_ident 01-17-2004 09:31 PM

so you would recommend Debian for company use?

which do you think would have the best security and be more stable

chort 01-18-2004 03:22 AM

I would definitely use OpenBSD for hosting shell accounts. That box is going to be hacked on 24x365 and you want something that can withstand the beating (and limit the damage if/when a user eventually manages to break something).

On another note, you might consider that 7 of the top 10 web hosting companies (according to Netcraft) use FreeBSD. That's a pretty strong endorsement for BSD's stability.

masinick 01-18-2004 10:24 AM

Yes, I'd recommend Debian
 
Quote:

Originally posted by secret_ident
so you would recommend Debian for company use?

which do you think would have the best security and be more stable

Yes, I would (and do) recommend Debian. Someone asked me which one that I'd personally stand behind, and that is the one.

As far as Netcraft statistics, about a week or so I was looking at Netcraft statistics, and the system I actually saw most frequently mentioned with the longest uptimes was consistently labeled BSD/OS, not FreeBSD or OpenBSD. BSD/OS, until recently, was actually a commercially produced BSD system, coming out of the BSDI work.

As far as free systems, OpenBSD rarely has any intrusions, so out of the free alternatives, that'd be the one to choose if statistics matter. Debian is pretty vigilant about security though, too, we're not talking about large differences in these figures.

It's definitely true, however, that BSD/OS carries, by far, the largest amount of traffic and extended uptimes without intrusions.

chort 01-18-2004 02:38 PM

masinick,

I have to take issue with the following statement:
Quote:

Debian is pretty vigilant about security though, too, we're not talking about large differences in these figures.
The difference is, the security measures in Debian are by way of additional packages, while the security measures in OpenBSD are enforced in the kernel and various pieces of the default userland. For instance, memory handling in OpenBSD is vastly more secure than any of the other popular OSs available today.

There's a difference between distributing a flavor of Linux with a lof of security precautions (things turned off by default, including popular security apps) and actually having a secure kernel (and not kernel extensions either, I'm talking about the stock kernel).

If someone is very familiar with hardening Debian and not familiar with *BSD, then probably the best option is Debian (at least, if they want to get setup quickly). If there's not an overwhelming difference in experience, or one can take the time to learn a few things before they "go live", then I would certainly recommend OpenBSD, simply because the underlying OS has much more thought put into security.

chort 01-18-2004 03:07 PM

By the way, the reference to FreeBSD being used at 7 of 10[1] top hosting providers is in reference to overall stability ove the last year, not longest uptime for a particular site.

See this article at Netcraft. Anyone can just leave a box on forever, but to run a reliable hosting provider with tens of thousands of sites hosted, that takes a stable OS.

[1] Correction: The article states "Seven of the top nine sites run on FreeBSD."

secret_ident 01-18-2004 03:34 PM

so, for a hosting company which os would you recommend? That would be easy to setup, and also has good security and is stable?

chort 01-18-2004 11:26 PM

I would personally recommend OpenBSD if you have the time to learn it--else if you're already an expert (and I really mean expert) with a different OS, use that (no matter what it is, Win2K3, MacOS X, etc). As I said above, if it's a box that users are logging into locally it's going to get pounded on non-stop by people trying to exploit it. You want an OS that does a very good job of preventing and containing local exploits, and that would be OpenBSD.

secret_ident 01-18-2004 11:31 PM

ok well thanks, because the FreeBSD isn't letting me open the XFree86 windows part, and I don't know a lot of unix/dos commands, and hopefully OpenBSD will allow me that feature because I'm perdicting that with IRC and Web Hosting, I would be getting lots of traffic, and probably lots of ddoss attacks, which later after I install OpenBSD I can figure how to stop attacks.

Again, thank you everyone for all of your help and helping me choose a good OS

-- Daniel T.

My only problem is that the programs such ash Plesk, and Cpanel do not operate on OpenBSD

ryancoolest 01-20-2004 08:55 PM

Yes I agree chort... if your after with security openBSD is the best option you have... for other services i would also try freeBSD...

infamous41md 01-20-2004 09:57 PM

if you're not familiar with the command line and are actually considering opening up a computer to the world you should get familiar with it, ASAP.

chort 01-20-2004 10:11 PM

Yeah, I agree. Putting X on a machine that will host shell accounts is not the best idea in the world...

In fact, I'm going to predict that you box is going to get rooted pretty quickly. If you're trying to host shell and web accounts, but cannot setup X on FreeBSD and don't know UNIX commands very well, then... well, you really shouldn't be hosting anything, yet. You're only setting yourself up for failure.


All times are GMT -5. The time now is 02:20 PM.