Re: On Access Virus Scanner Recommendation

Holger Rauch wrote:
Hi,

On Fri, 27 Nov 2009, Paul Johnson wrote:

Holger Rauch wrote:

I'm thinking about using NOD32 on a Debian system for on access virus
scanning (i.e. scan a file when it's created or its contents are
modified in some way).
Why, when it's so much easier to not allow connections from insecure
operating systems prone to virus infection to start with?

Because disallowing these connections (unfortunately) is not an option
since Windows clients are used in my company and they too need to be
able to both access and modify files on our file server.

What's even more interesting though is: Which is the right Dazuko
version to choose? There are several of them around.

Kind regards,

Holger

Or look at it the other way round....

Linux is not vulnerable to windows virus. Note the careful wording ;-) So don't waste valuable server cpu cycles on-access scanning on a Linux server. Instead protect your Linux with things like rkhunter.

Also all your windows PCs already have to run on-access scanners anyway - right.

So a virus should never get near the server anyway at least in theory...

In practice virus do often get through simply because the virus profiles available for both server and clients PCs are always one step behind the crooks. Best you can do is have have regular full virus scans on the Windows PCs hard disks to fix once the anti-virus companies catch up.

You could be very sociable and scan the files at quiet times on the server and quarantine...clamav does a nice job at no cost. You can also use it as a quality check on your commercial scanner.

Good luck,

Berni


--
To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx with a subject of "unsubscribe". Trouble? Contact listmaster@xxxxxxxxxxxxxxxx

Relevant Pages

  • Re: Information Store taking all available memory.
    ... There are cases where the virus software is scanning things it should not ... The aforementioned should be excluded in the virus software. ... Do Not Back Up or Scan Exchange 2000 Drive M ... Understanding Virus Scanning API 2.0 in Exchange 2000 Server ...
    (microsoft.public.exchange2000.information.store)
  • Re: Anti-Virus on Terminal Server 2003 POP3 email
    ... be of no use to Outlook running on the Terminal Server. ... all the POP3 email virus scanners I've found won't work on ... What you need is an enterprise class virus scanner for the server that you run concurrently with the Outlook session and does POP3 e-mail scanning. ...
    (microsoft.public.windows.terminal_services)
  • Re: Antivirus checking backup shadow copy
    ... > I run realtime scanning on the server and have for years. ... > send you a file that's a brand new virus. ... Yes, you're always running a risk of infection, and other problems, by the ...
    (microsoft.public.windows.server.sbs)
  • Re: Sbs 2003 r2 running very slowly
    ... on-access virus scanning? ... is you get a virus-infected file and save it to the server today. ... Because you've disabled on-access scanning, ... Am having problems with a sbs server running at snails pace.. ...
    (microsoft.public.windows.server.sbs)
  • Re: Is VMS losing the Financial Sector, also?
    ... On Behalf Of Bill Gunshannon ... Is VMS losing the Financial Sector, ... One of their Customers was running Windows Server and was down for 2 ...
    (comp.os.vms)