We and our customers don't have problems with that worm... :-) I really like, that each new possible threat to any Linux servers make big headlines. That's a good sign for Linux.
Please note, that the worm exploits a documented bug, that there were fixes for it BEFORE the worm came along, and these fixes are free and available for all Linuxes all over the world. The version of the bind package, that is vulnerable, is up to 8.3 beta. If you have 8.3 or newer, you are not vulnerable. Newest version is 9.1.
Some day, Brian, you will probably study network security issues and you will see how stupid computer journalists and their readers can be. Security is not about the OS, but about fixing holes when they appear. With most Linux distributions, this can be done fast, efficient and for almost no cost.
Only those of our customers, that are ISPs, have public available DNS servers that need to be totally secure. All other customers have firewalls, and also get upgrades from time to time, just not as often. The absolutely biggest security issue for most of our customers is the risc that they might open some kind of attachment using a Microsoft e-mail program, that the virus scanners don't catch because the virus is too new or special designed for hacking this specific customer.
Lars. |