Re: Antivirus for CLI

[Camaleón]

On Wed, 20 Jun 2012 22:46:18 +0200, Ralf Mardorf wrote:

> This might be important for the OP too:
> 
> On Wed, 2012-06-20 at 20:01 +, Camaleón wrote:
>> Ralf, I don't know why is that you don't want to give your points about
>> ClamAV, but saying "I don't like for several resons" and "ClamAV was
>> unreliable here..." without providing more data that proves the above,
>> well, I will have to take it as your "personal" POV and nothing more.
> 
> Virus detection most of the times was better using AVIRA. 

That something be better for you does not make the rest "worst" nor 
"unreliable" per se, that's why I asked for some facts that prove your 
claims. And as I already mentioned, the only "but" for ClamAV was its 
accuracy for detecting malware.

> AVIRA was more stable and had a better for free support, perhaps AVIRA
> simply had more money and a longer time experience, than Sourcefire,
> dunno. Again, YMMV, it's just what I experienced. What details are 
> missing? I don't have statistics.

(...)

It's okay Ralf, but I did not ask for you experience with AVIRA (and I 
would review its current licence, just in case...) nor another AV, I was 
only perplexed about your comments and bad experiences with ClamAV and 
I'm perplexed because I never heard neither experinced by myself for a 
ClamAV behaving as bad as you mention.

Greteings,

-- 
Camaleón


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/jrte1c$8av$1...@dough.gmane.org

Re: Antivirus for CLI

[Ralf Mardorf]

In the past I used the kernel-rt only, which really could be a big
difference to set ups using other kernels, regarding to steadiness after
upgrades.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/1340226001.2803.220.camel@precise

Re: Antivirus for CLI

[Ralf Mardorf]

This might be important for the OP too:

On Wed, 2012-06-20 at 20:01 +, Camaleón wrote:
> Ralf, I don't know why is that you don't want to give your points about 
> ClamAV, but saying "I don't like for several resons" and "ClamAV was 
> unreliable here..." without providing more data that proves the above, 
> well, I will have to take it as your "personal" POV and nothing more.

Virus detection most of the times was better using AVIRA.
AVIRA was more stable and had a better for free support, perhaps AVIRA
simply had more money and a longer time experience, than Sourcefire,
dunno. Again, YMMV, it's just what I experienced. What details are
missing? I don't have statistics.
It might be that I had to protect XP users and you needed to protect
98se or Vista users and AVIRA simply had a better database for virulent
software that only attacks XP, dunno.
I didn't automate anything, just run manually from a terminal emulation.
Setting up auto-scanning for e.g. emails might be more difficult for
AVIRA, dunno, at least default settings for my needs were easier to set
up.

So if somebody asks for CLI tools, I only can mention tools I know and I
only know Clam and AVIRA, since Clam already was mentioned I mentioned
AVIRA only, but add my experiences. I can't give you more information.

Perhaps the OP is interested in your better experiences and the reasons
for that, with Clam. I don't know why AVIRA was more stable on my
machine, it simply happened and I didn't search for the reason. I only
can repeat, that bug reports were ignored by Clam and AVIRA did take
care very well.

Hth


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/1340225178.2803.216.camel@precise

Re: Antivirus for CLI

[Camaleón]

On Wed, 20 Jun 2012 20:41:16 +0200, Ralf Mardorf wrote:

> On Wed, 2012-06-20 at 17:49 +, Camaleón wrote:
>> Ralf, I asked for a specific question ("why you don't like ClamAV")
>> because you said there were (sic) "several reasons" for that. If you
>> don't want/can't respond, that's okay but please don't make this lasts
>> longer than it should.
> 
> This was my response to your request:

(...)

Ralf, I don't know why is that you don't want to give your points about 
ClamAV, but saying "I don't like for several resons" and "ClamAV was 
unreliable here..." without providing more data that proves the above, 
well, I will have to take it as your "personal" POV and nothing more.

Of course, my experience over the years with ClamAV is completely "the 
opposite" :-)

Greetings,

-- 
Camaleón


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/jrta67$8av$1...@dough.gmane.org

Re: Antivirus for CLI

[rjc]

On Wed, Jun 20, 2012 at 06:49:30PM BST, Camaleón wrote:
> On Wed, 20 Jun 2012 19:38:25 +0200, Ralf Mardorf wrote:
> 
> > On Wed, 2012-06-20 at 15:56 +, Camaleón wrote:
> >> I know you are very prone to divert the conversation away from the
> >> topic
> > 
> > At least not for that topic. 
> 
> (...)
> 
> Ralf, I asked for a specific question ("why you don't like ClamAV") 
> because you said there were (sic) "several reasons" for that. If you 
> don't want/can't respond, that's okay but please don't make this lasts 
> longer than it should.

Since it doesn't add anything to the thread and is off-topic could you
kindly take this "ping-pong" off the list, please?

Ta,
-- 
rjc


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20120620192826.ga16...@linuxstuff.pl

Re: Antivirus for CLI

[Brian]

On Wed 20 Jun 2012 at 17:49:30 +, Camaleón wrote:

Euro 2012 is not on TV tonight. I'm at a loose end. I'll most likely
rue not getting into the garden to slaughter some slugs.

> Ralf, I asked for a specific question ("why you don't like ClamAV") 

You did. It's a matter of record.

> because you said there were (sic) "several reasons" for that. If you 

He did say that. It's on record too.

> don't want/can't respond, that's okay

He did respond

   * ClamGUI as buggy as hell
   * unable to update the database
   * unable to scan some files he wanted to scan
   * support not interested in bug reports, feature requests

You may not agree with the reasons but he did give them.

>but please don't make this lasts 
> longer than it should.

Is there a time limit on this thread? Does it self-destruct after a
certain time? If so, I'm setting it to a minute from now.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20120620184941.GS30016@desktop

Re: Antivirus for CLI

[Ralf Mardorf]

On Wed, 2012-06-20 at 17:49 +, Camaleón wrote:
> Ralf, I asked for a specific question ("why you don't like ClamAV") 
> because you said there were (sic) "several reasons" for that. If you 
> don't want/can't respond, that's okay but please don't make this lasts 
> longer than it should.

This was my response to your request:

On Wed, 2012-06-20 at 17:02 +0200, Ralf Mardorf wrote:
> [snip] AVIRA's CLI, the old and the one some years replaced this old
> one, where easier to use and AVIRA was better to setup for my needs. I
> manually scanned files and mails I forwarded to Windows users. The AVIRA
> support was highly interested in fixing issues, such as e.g. Linux files
> that accidentally where marked as virulent, adding new virulent stuff to
> the database. [snip]
> Clam was unreliable here, did easily brake after upgrades.
> YMMV!


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/1340217676.2803.128.camel@precise

Re: Antivirus for CLI

[Camaleón]

On Wed, 20 Jun 2012 19:38:25 +0200, Ralf Mardorf wrote:

> On Wed, 2012-06-20 at 15:56 +, Camaleón wrote:
>> I know you are very prone to divert the conversation away from the
>> topic
> 
> At least not for that topic. 

(...)

Ralf, I asked for a specific question ("why you don't like ClamAV") 
because you said there were (sic) "several reasons" for that. If you 
don't want/can't respond, that's okay but please don't make this lasts 
longer than it should.

Greetings,

-- 
Camaleón


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/jrt2fa$8av$1...@dough.gmane.org

Re: Antivirus for CLI

[Ralf Mardorf]

@ the OP: If possible get different antivirus software and test what's
better regarding to your needs.

@ Camaleón:

On Wed, 2012-06-20 at 15:56 +, Camaleón wrote:
> I know you are very prone to divert the conversation away from the
> topic

At least not for that topic. Yes, originally I mentioned that I
preferred AVIRA to Clam, but the OP asked for CLI tools and Clam was the
only one recommended on that list, so I added AVIRA and to keep it
short, I didn't argue what is good or bad for AVIRA or Clam in the
original reply. Actually I additionally only mentioned that there
shouldn't be an issue with Clam for emails.
Then it was you, who became OT. IMO you do this much more often then I
do, while it's not annoying me.

On Tue, 2012-06-19 at 09:15 +0200, Ralf Mardorf wrote:
> I'm not running antivirus software anymore, but experienced
> http://www.avira.com/en/index as the better choice. There still should
> be a free (as in free beer) Linux version available, but I couldn't
> find the link.

On Wed, 2012-06-20 at 10:20 +0200, Ralf Mardorf wrote:
> I don't like clamav for several reasons, but regarding to that email
> issue I suspect you're not completely right. I suspect you'll be
> correct for MUAs like Thunderbird/Icedove, that probably still use 1
> file for all emails of one "folder". Kmail, Evolution and others
> nowadays use a mailbox format, that use a single file for each email.


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/1340213905.2803.120.camel@precise

Re: Antivirus for CLI

[Camaleón]

On Wed, 20 Jun 2012 17:36:52 +0200, Ralf Mardorf wrote:

> On Wed, 2012-06-20 at 15:15 +, Camaleón wrote:
>> > ClamGUI was buggy as hell,
>> 
>> (...)
>> 
>> sm01@stt008:~$ apt-cache search clamgui sm01@stt008:~$
>> 
>> No such application here or should I redefine the search?
>> 
>> Anyway, we are talking about CLI scanning utilities for servers, not
>> GUI based solutions for the clients.
>> 
>> Next...?
> 
> Why did you snip what I've written about the CLI for AVIRA vs Clam, the
> support, the database. Should I copy and paste it to continue ;D?

(...)

Because I asked *why you don't like ClamAV* and then for your *ClamAV 
problems* not Avira nor other GUI frontends and I know you are very prone 
to divert the conversation away from the topic, just wanted to cut 
that... ;-)

P.S. Remember I was a long time openSUSE user so I do know Avira quite 
well but this is not what I asked.

Greetings,

-- 
Camaleón


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/jrsrs9$8av$9...@dough.gmane.org

Re: Antivirus for CLI

[Ralf Mardorf]

On Wed, 2012-06-20 at 15:15 +, Camaleón wrote:
> > ClamGUI was buggy as hell, 
> 
> (...)
> 
> sm01@stt008:~$ apt-cache search clamgui
> sm01@stt008:~$
> 
> No such application here or should I redefine the search?
> 
> Anyway, we are talking about CLI scanning utilities for servers, not GUI 
> based solutions for the clients.
> 
> Next...?

Why did you snip what I've written about the CLI for AVIRA vs Clam, the
support, the database. Should I copy and paste it to continue ;D?

If you experienced it vice versa, than you did. If I ever should be
interested in using antivir software again, I first would try AVIRA
again, assumed it still will provide a "free" version for Linux.

I run both and compared them for my needs. Clam was less good than AVIRA
was. In Germany AVIRA was (is?) often used by Linux users, especially by
Suse users. I suspect AVIRA was the most used software for free on Linux
and Windows and even among the software that wasn't free it was the most
used here in Germany. I'm not a computer enthusiast anymore, I don't
know if it's still the same. I can ask a friend, I suspect he still has
knowledge about this.


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/1340206612.2803.104.camel@precise

Re: Antivirus for CLI

[Camaleón]

On Wed, 20 Jun 2012 17:02:12 +0200, Ralf Mardorf wrote:

> On Wed, 2012-06-20 at 14:05 +, Camaleón wrote:
 
>> > I don't like clamav for several reasons,
>> 
>> (...)
>> 
>> Can you at least list "one"? :-)
>> 
>> The only drawback I can mention is about its accuracy (when compared to
>> another payware and bloatware anti-malware solutions), but for e-mail
>> scanning or samba it does a nice job mainly because of its perfect
>> integration within a linux environment.
>> 
>> An AV solution in linux has to be seen as an additional defense for the
>> windows boxes but not the only one, meaning windows users have to have
>> their own anti-malware software properly setup and running, either
>> locally of using a server based deployment.
> 
> ClamGUI was buggy as hell, 

(...)

sm01@stt008:~$ apt-cache search clamgui
sm01@stt008:~$

No such application here or should I redefine the search?

Anyway, we are talking about CLI scanning utilities for servers, not GUI 
based solutions for the clients.

Next...?

Greetings,

-- 
Camaleón


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/jrspe8$8av$8...@dough.gmane.org

Re: Antivirus for CLI

[Ralf Mardorf]

On Wed, 2012-06-20 at 14:05 +, Camaleón wrote:
> On Wed, 20 Jun 2012 10:20:27 +0200, Ralf Mardorf wrote:
> 
> > On Tue, 2012-06-19 at 04:26 -0400, Jude DaShiell wrote:
> >> clamav probably will help along with clamav-milter to filter e-mail.
> >> Lastly, nmh installed for everybody to use because you get out of mbox
> >> format with that.  If clamav finds a virus in someone's mbox file and
> >> quarrantines that whole file they just lost all of their email. 
> 
> (...)
> 
> Well, regardless the message format in use (mbox, maildir, nmh...) you 
> can configure (at server level) an imap/pop3 account for every user 
> (e.g., "user+vi...@example.com") where to direct the malware that has 
> been detected for that account.
> 
> OTOH I would rather stick to the usual and well-known message formats 
> like maildir or mbox unless I had any specific requirement for not using 
> them.
> 
> > I don't like clamav for several reasons, 
> 
> (...)
> 
> Can you at least list "one"? :-)
> 
> The only drawback I can mention is about its accuracy (when compared to 
> another payware and bloatware anti-malware solutions), but for e-mail 
> scanning or samba it does a nice job mainly because of its perfect 
> integration within a linux environment.
> 
> An AV solution in linux has to be seen as an additional defense for the 
> windows boxes but not the only one, meaning windows users have to have 
> their own anti-malware software properly setup and running, either 
> locally of using a server based deployment.

ClamGUI was buggy as hell, unable to update the database, unable to scan
some files I wanted to scan. The support wasn't interested in bug
reports, feature requests. Perhaps unimportant for CLI, however, even
with an updated database I had much better success using AVIRA's
antivir. AVIRA's CLI, the old and the one some years replaced this old
one, where easier to use and AVIRA was better to setup for my needs. I
manually scanned files and mails I forwarded to Windows users. The AVIRA
support was highly interested in fixing issues, such as e.g. Linux files
that accidentally where marked as virulent, adding new virulent stuff to
the database. In Germany AVIRA for Linux perhaps is more used than in
other countries. IIRC Suse added it to the repositories, I might be
wrong and it was only available by the pacman repository. Anyway, it was
easy to install from the AVIRA download and worked without any issues on
different distros I used. Clam was unreliable here, did easily brake
after upgrades.
YMMV!
Ralf


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/1340204532.2803.76.camel@precise

Re: Antivirus for CLI

[Camaleón]

On Wed, 20 Jun 2012 10:20:27 +0200, Ralf Mardorf wrote:

> On Tue, 2012-06-19 at 04:26 -0400, Jude DaShiell wrote:
>> clamav probably will help along with clamav-milter to filter e-mail.
>> Lastly, nmh installed for everybody to use because you get out of mbox
>> format with that.  If clamav finds a virus in someone's mbox file and
>> quarrantines that whole file they just lost all of their email. 

(...)

Well, regardless the message format in use (mbox, maildir, nmh...) you 
can configure (at server level) an imap/pop3 account for every user 
(e.g., "user+vi...@example.com") where to direct the malware that has 
been detected for that account.

OTOH I would rather stick to the usual and well-known message formats 
like maildir or mbox unless I had any specific requirement for not using 
them.

> I don't like clamav for several reasons, 

(...)

Can you at least list "one"? :-)

The only drawback I can mention is about its accuracy (when compared to 
another payware and bloatware anti-malware solutions), but for e-mail 
scanning or samba it does a nice job mainly because of its perfect 
integration within a linux environment.

An AV solution in linux has to be seen as an additional defense for the 
windows boxes but not the only one, meaning windows users have to have 
their own anti-malware software properly setup and running, either 
locally of using a server based deployment.

Greetings,

-- 
Camaleón


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/jrslaj$8av$4...@dough.gmane.org

Re: Antivirus for CLI

[Muhammad Yousuf Khan]

On Wed, Jun 20, 2012 at 1:20 PM, Ralf Mardorf
 wrote:
> On Tue, 2012-06-19 at 04:26 -0400, Jude DaShiell wrote:
>> clamav probably will help along with clamav-milter to filter e-mail.
>> Lastly, nmh installed for everybody to use because you get out of mbox
>> format with that.  If clamav finds a virus in someone's mbox file and
>> quarrantines that whole file they just lost all of their email.  However
>> nmh puts each message in its own file and if clamav quarrantines those
>> files the user doesn't loose access to all of their e-mail just the
>> infected messages. Your mileage will vary.
>
> I don't like clamav for several reasons, but regarding to that email
> issue I suspect you're not completely right. I suspect you'll be correct
> for MUAs like Thunderbird/Icedove, that probably still use 1 file for
> all emails of one "folder". Kmail, Evolution and others nowadays use a
> mailbox format, that use a single file for each email.
>
> - Ralf
>

Thanks  Ralf and Camaleon for your feedback.

>
> --
> To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
> Archive: http://lists.debian.org/1340180427.2461.21.camel@precise
>


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/CAGWVfMkduwUbf-gAxLZZh6-f2uNFsOCR7rPoUUxuZ2d9k=c...@mail.gmail.com

Re: Antivirus for CLI

[Ralf Mardorf]

On Tue, 2012-06-19 at 04:26 -0400, Jude DaShiell wrote:
> clamav probably will help along with clamav-milter to filter e-mail.  
> Lastly, nmh installed for everybody to use because you get out of mbox 
> format with that.  If clamav finds a virus in someone's mbox file and 
> quarrantines that whole file they just lost all of their email.  However 
> nmh puts each message in its own file and if clamav quarrantines those 
> files the user doesn't loose access to all of their e-mail just the 
> infected messages. Your mileage will vary.

I don't like clamav for several reasons, but regarding to that email
issue I suspect you're not completely right. I suspect you'll be correct
for MUAs like Thunderbird/Icedove, that probably still use 1 file for
all emails of one "folder". Kmail, Evolution and others nowadays use a
mailbox format, that use a single file for each email.

- Ralf


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/1340180427.2461.21.camel@precise

Re: Antivirus for CLI

[Camaleón]

On Tue, 19 Jun 2012 11:50:23 +0500, Muhammad Yousuf Khan wrote:

> a newbie question.
> i am using Debian for providing server level services (non desktop) and
> i am using only CLI for managing the services further more i am using
> SAMBA, SQUID, Virtualization KVM  and Planning for MTA. do you guys
> think i need an Antivirus for server side virus protection?

Yes, at least for your samba and e-mail users. They will thank you :-)

> We are using Nod32 and i found out that they have a software for GUI
> only. i couldn't find CLI base client.
> 
> any help would be appropriated.

There's ClamAV which I think it can be integrated within samba and the 
MTA.

Greetings,

-- 
Camaleón


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/jrq99s$cse$6...@dough.gmane.org

Re: Antivirus for CLI

[Muhammad Yousuf Khan]

Thanks  everyone :)

On Tue, Jun 19, 2012 at 1:45 PM, rjc  wrote:
> On Tue, Jun 19, 2012 at 08:33:58AM BST, Muhammad Yousuf Khan wrote:
>> i am not worried about client side protection because we have up to
>> date antivirus clients installed on every client what i am worried
>> about is to protect the server so virus would not effect the server
>> side services.
>> i am asking this because i believe precautionary measures before any
>> disaster would be a good option to choose and i am not very experience
>> in Linux world (Debian)
>
> I can wholeheartedly recommend ClamAV.
>
> I used it a while back integrated with Squid as part of DansGuardian.
>
> A real life example from not so long ago: it detected a Flashback [0]
> trojan horse while both McAfee and Sophos failed to do so.
>
> [0] http://en.wikipedia.org/wiki/Trojan_BackDoor.Flashback
>
> Regards,
> --
> rjc
>
>
> --
> To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
> Archive: http://lists.debian.org/20120619084513.ga13...@linuxstuff.pl
>


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/CAGWVfMkRAXDnsnZ0C+cSJ_-dkbpHpH+2gCoXJXLVb=eapcv...@mail.gmail.com

Re: Antivirus for CLI

[rjc]

On Tue, Jun 19, 2012 at 08:33:58AM BST, Muhammad Yousuf Khan wrote:
> i am not worried about client side protection because we have up to
> date antivirus clients installed on every client what i am worried
> about is to protect the server so virus would not effect the server
> side services.
> i am asking this because i believe precautionary measures before any
> disaster would be a good option to choose and i am not very experience
> in Linux world (Debian)

I can wholeheartedly recommend ClamAV.

I used it a while back integrated with Squid as part of DansGuardian.

A real life example from not so long ago: it detected a Flashback [0]
trojan horse while both McAfee and Sophos failed to do so.

[0] http://en.wikipedia.org/wiki/Trojan_BackDoor.Flashback

Regards,
-- 
rjc


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20120619084513.ga13...@linuxstuff.pl

Re: Antivirus for CLI

[Jude DaShiell]

clamav probably will help along with clamav-milter to filter e-mail.  
Lastly, nmh installed for everybody to use because you get out of mbox 
format with that.  If clamav finds a virus in someone's mbox file and 
quarrantines that whole file they just lost all of their email.  However 
nmh puts each message in its own file and if clamav quarrantines those 
files the user doesn't loose access to all of their e-mail just the 
infected messages. Your mileage will vary. On Tue, 19 Jun 2012, Muhammad 
Yousuf Khan wrote:

> On Tue, Jun 19, 2012 at 12:15 PM, Ralf Mardorf
>  wrote:
> > On Tue, 2012-06-19 at 09:02 +0200, Alberto Fuentes wrote:
> >> On 06/19/2012 08:50 AM, Muhammad Yousuf Khan wrote:
> >> > a newbie question.
> >> > i am using Debian for providing server level services (non desktop)
> >> > and i am using only CLI for managing the services further more i am
> >> > using SAMBA, SQUID, Virtualization KVM  and Planning for MTA. do you
> >> > guys think i need an Antivirus for server side virus protection?
> >> >
> >> > We are using Nod32 and i found out that they have a software for GUI
> >> > only. i couldn't find CLI base client.
> >> >
> >> > any help would be appropriated.
> >> >
> >> >
> >> > Thanks,
> >> >
> >> > MYK
> >> >
> >> >
> >>
> >> well, for the servers dont really need antivirus protection (how many
> >> programs from unknow sources are you using?). You can run clamav for
> >> mail attachments and samba shares to protect your users.
> >>
> >> You can run some nids/ids or honeypot to mitigate attacks on the server
> >>
> >> greets
> >> aL
> >
> > I'm not running antivirus software anymore, but experienced
> > http://www.avira.com/en/index as the better choice. There still should
> > be a free (as in free beer) Linux version available, but I couldn't find
> > the link.
> 
> Thanks , i'll check on this
> 
> >
> > - Ralf
> >
> >
> > --
> > To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
> > with a subject of "unsubscribe". Trouble? Contact 
> > listmas...@lists.debian.org
> > Archive: http://lists.debian.org/1340090147.2090.25.camel@precise
> >
> 
> 
> --
> To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
> Archive: 
> http://lists.debian.org/CAGWVfMm7zwNe2xPV2=mda5e8+jj0xfma3cyafjqk9vbolz1...@mail.gmail.com
> 
> 


Jude 



-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/alpine.bsf.2.01.1206190422120.47...@freire1.furyyjbeyq.arg

Re: Antivirus for CLI

[Muhammad Yousuf Khan]

i am not worried about client side protection because we have up to
date antivirus clients installed on every client what i am worried
about is to protect the server so virus would not effect the server
side services.
i am asking this because i believe precautionary measures before any
disaster would be a good option to choose and i am not very experience
in Linux world (Debian)

Thanks


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/CAGWVfMm4qsm-Vng5rtxQP07i=+nrya56oqpz22rgz9pbqq2...@mail.gmail.com

Re: Antivirus for CLI

[Muhammad Yousuf Khan]

On Tue, Jun 19, 2012 at 12:15 PM, Ralf Mardorf
 wrote:
> On Tue, 2012-06-19 at 09:02 +0200, Alberto Fuentes wrote:
>> On 06/19/2012 08:50 AM, Muhammad Yousuf Khan wrote:
>> > a newbie question.
>> > i am using Debian for providing server level services (non desktop)
>> > and i am using only CLI for managing the services further more i am
>> > using SAMBA, SQUID, Virtualization KVM  and Planning for MTA. do you
>> > guys think i need an Antivirus for server side virus protection?
>> >
>> > We are using Nod32 and i found out that they have a software for GUI
>> > only. i couldn't find CLI base client.
>> >
>> > any help would be appropriated.
>> >
>> >
>> > Thanks,
>> >
>> > MYK
>> >
>> >
>>
>> well, for the servers dont really need antivirus protection (how many
>> programs from unknow sources are you using?). You can run clamav for
>> mail attachments and samba shares to protect your users.
>>
>> You can run some nids/ids or honeypot to mitigate attacks on the server
>>
>> greets
>> aL
>
> I'm not running antivirus software anymore, but experienced
> http://www.avira.com/en/index as the better choice. There still should
> be a free (as in free beer) Linux version available, but I couldn't find
> the link.

Thanks , i'll check on this

>
> - Ralf
>
>
> --
> To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
> Archive: http://lists.debian.org/1340090147.2090.25.camel@precise
>


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/CAGWVfMm7zwNe2xPV2=mda5e8+jj0xfma3cyafjqk9vbolz1...@mail.gmail.com

Re: Antivirus for CLI

[Muhammad Yousuf Khan]

On Tue, Jun 19, 2012 at 12:02 PM, Alberto Fuentes
 wrote:
> On 06/19/2012 08:50 AM, Muhammad Yousuf Khan wrote:
>>
>> a newbie question.
>> i am using Debian for providing server level services (non desktop)
>> and i am using only CLI for managing the services further more i am
>> using SAMBA, SQUID, Virtualization KVM  and Planning for MTA. do you
>> guys think i need an Antivirus for server side virus protection?
>>
>> We are using Nod32 and i found out that they have a software for GUI
>> only. i couldn't find CLI base client.
>>
>> any help would be appropriated.
>>
>>
>> Thanks,
>>
>> MYK
>>
>>
>
> well, for the servers dont really need antivirus protection (how many
> programs from unknow sources are you using?). You can run clamav for mail

none, i am using  supporting services Ethtool, smartctl, FTPD  or very
common type of utilities . thats all and of course the core
application for providing the main services like SAMBA and SQUID

> attachments and samba shares to protect your users.
>
> You can run some nids/ids or honeypot to mitigate attacks on the server

any experience advice and easy to manage nids/ids or honeypot?

>
> greets
> aL
>
>
> --
> To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject
> of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
> Archive: http://lists.debian.org/4fe023ee.4010...@qindel.com
>


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/cagwvfmmbug5a4djorgdjutwxoz-dscnfo_dhfts9uycfakp...@mail.gmail.com

Re: Antivirus for CLI

[Ralf Mardorf]

On Tue, 2012-06-19 at 09:02 +0200, Alberto Fuentes wrote:
> On 06/19/2012 08:50 AM, Muhammad Yousuf Khan wrote:
> > a newbie question.
> > i am using Debian for providing server level services (non desktop)
> > and i am using only CLI for managing the services further more i am
> > using SAMBA, SQUID, Virtualization KVM  and Planning for MTA. do you
> > guys think i need an Antivirus for server side virus protection?
> >
> > We are using Nod32 and i found out that they have a software for GUI
> > only. i couldn't find CLI base client.
> >
> > any help would be appropriated.
> >
> >
> > Thanks,
> >
> > MYK
> >
> >
> 
> well, for the servers dont really need antivirus protection (how many 
> programs from unknow sources are you using?). You can run clamav for 
> mail attachments and samba shares to protect your users.
> 
> You can run some nids/ids or honeypot to mitigate attacks on the server
> 
> greets
> aL

I'm not running antivirus software anymore, but experienced
http://www.avira.com/en/index as the better choice. There still should
be a free (as in free beer) Linux version available, but I couldn't find
the link.

- Ralf


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/1340090147.2090.25.camel@precise

Re: Antivirus for CLI

[Alberto Fuentes]

On 06/19/2012 08:50 AM, Muhammad Yousuf Khan wrote:

a newbie question.
i am using Debian for providing server level services (non desktop)
and i am using only CLI for managing the services further more i am
using SAMBA, SQUID, Virtualization KVM  and Planning for MTA. do you
guys think i need an Antivirus for server side virus protection?

We are using Nod32 and i found out that they have a software for GUI
only. i couldn't find CLI base client.

any help would be appropriated.


Thanks,

MYK




well, for the servers dont really need antivirus protection (how many 
programs from unknow sources are you using?). You can run clamav for 
mail attachments and samba shares to protect your users.


You can run some nids/ids or honeypot to mitigate attacks on the server

greets
aL


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/4fe023ee.4010...@qindel.com

Antivirus for CLI

[Muhammad Yousuf Khan]

a newbie question.
i am using Debian for providing server level services (non desktop)
and i am using only CLI for managing the services further more i am
using SAMBA, SQUID, Virtualization KVM  and Planning for MTA. do you
guys think i need an Antivirus for server side virus protection?

We are using Nod32 and i found out that they have a software for GUI
only. i couldn't find CLI base client.

any help would be appropriated.


Thanks,

MYK


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/CAGWVfMk2OeCbRppzLZ6Qf5adfv2RQi3BA6V+WA-=fyflovo...@mail.gmail.com