Welcome to our community

Be a part of something great, join today!

Log in
  • Hey all, just changed over the backend after 15 years I figured time to give it a bit of an update, its probably gonna be a bit weird for most of you and i am sure there is a few bugs to work out but it should kinda work the same as before... hopefully :)

OSX Lion Server

Is that right that XSan is built in now?
 
Dustin Cross said:
Looks pretty interesting. With all those network services, I wonder how the the security is?


Dusty
Click to expand...

Probably no different than previous versions of OS X Server. Kerberos, L2TP, IPSec, IPFW2 and OpenSSL are all included. OS X Server is built on a certified UNIX core, so you should be able to run most any UNIX security services.
 
I was thinking about the calender server, mail server, web server, chat server, and all those things. Those are the types of ports and services I am wondering about and the way Apple likes to auto magic everything.....


Dusty
 
Dustin Cross said:
I was thinking about the calender server, mail server, web server, chat server, and all those things. Those are the types of ports and services I am wondering about and the way Apple likes to auto magic everything.....


Dusty
Click to expand...

Most everything in OS X Server uses open standards or is open source, and you can manage it from the GUI or the command line. Calendar Server uses CalDAV, for example, web server is Apache, chat server is Jabber and XMPP. Check out the tech specs here: http://www.apple.com/macosx/server/specs.html

I hope that helps.
 
Dustin Cross said:
Not really. I will know my answer once I run a port scan on a new Lion Server with all those apps running in the default config and see what vulnerabilities there are.


Dusty
Click to expand...

Ah, now I see where you're heading. I'll be interested to hear what you find. I haven't worked with the current version of OS X Server but in previous versions I believe all services were off until enabled.
 
Apple is pretty good about keeping ports closed by default. And there's a bunch of new sandboxing going on in Lion that can, in many instances, protect the system even if particular processes are compromised, though I haven't found a detailed breakdown of how it's used with respect to the services OS X Server provides.
 
Dustin Cross said:
Not really. I will know my answer once I run a port scan on a new Lion Server with all those apps running in the default config and see what vulnerabilities there are.


Dusty
Click to expand...

???? It will be as vulnerable/invulnerable as the person administrating it wants it to be. What are you talking about? If you are asking these types of questions I don't think you should be concerned with its security as much as you think you should be. . .
 
You must log in or register to reply here.
Back
Top