Re: [TCLUG:8116] theoretical challenge

[Mark K <mkroska@readynetgo.com>]

We have a few FileMakerPro databases running here, on a Mac server.  We
connect it to the net using Lasso server, which opens the databases and
makes queries to them.  You can also have OBDC connectivity with Lasso, to
import some SQL databases.  We have yet to run an "all-in-one" Mac
solution, still using Apache for all web serving and RedHat Secure for SSL
stuff.  We've looked at using all Mac stuff (WebStar comes to mind for a
web server), but the scalablity is just not there.  The Mac servers seem
as secure as anything I've seen, so far.

Just verifying what Christopher said, FileMakerPro is available for Mac
and Win32 flavors, and they do "do" cross-platform fairly well.

If there is a specific issue you need with FileMaker, let me know
privately.

Mark


On Sun, 5 Sep 1999, Christopher Palmer wrote:

> On Sun, 5 Sep 1999, Lawrence Crisp wrote:
> 
> > Ok, I have what may be an off topic question, but I'm not sure, so I'll 
> > ask it anyway, and beg forgiveness if it is.  First off, is anyone familiar 
> > with Filemaker databases?  Can one set one up on a Linux system accessable 
> > on the web?  Second, what kind of security holes might exist in a Filemaker 
> > database on the web, on any platform?  Basically, if I were to set up a 
> > Filemaker database on the web, how could one crack it?  How could I make it 
> > secure from these attacks?
> 
> To the best of my knowledge, Filemaker runs only on Mac OS. It does have a
> Web plugin that allows you to serve the database as a Web site. Any
> security issues would pertain directly to Mac OS and Filemaker itself, and
> I've never seen anything relating to those things on (e.g.) Bugtraq (but
> that doesn't mean you shouldn't search the Bugtraq archives).
> 
> Mac OS is of course not a multiuser system, and doesn't typically run any
> services. So you can consider a Mac running Filemaker roughly equivalent
> to a pretty tight Unix system, and any vulnerabilities will be specific to
> Filemaker's Web server plugin.
> 
> 
> -- Chris
> 
>   Christopher Reid Palmer : http://www.innerFireWorks.com/
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tclug-list-unsubscribe@mn-linux.org
> For additional commands, e-mail: tclug-list-help@mn-linux.org
> 

-
"Men are born ignorant, not stupid; they are made stupid by education."

Mark J. (Milker) Kroska                          mkroska@readynetgo.com
ReadyNET GO!, Inc.                            http://www.readynetgo.com           
25 7th Ave South  Suite 100                        voice (320) 656-0765
St. Cloud, MN 56301-4259                             fax (320) 203-7052
***********Web Site Design, Development, Hosting & Marketing***********