Re: Virus protection
At 10:52 10/9/2003, you wrote: On Thu, Oct 09, 2003 at 11:59:30AM -0400, Michael Gargiullo wrote: To add fuel to Christians fire. When Melissa came out, everything on a samba share got hosed as well. Samba is a bastard protocol only necessary on mixed networks and only due to MS's dominance, and anyone who can, is better off avoiding it, and its inherent MS-type problems altogether. -- Hal Burgiss Hal, from everything I've ever read, NFS is a security nightmare. If you eliminate Samba, how exactly do you plan to easily share, read/write, export, and mount filesystems or folders across a network? -- Rodolfo J. Paiz [EMAIL PROTECTED] -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list
Virus protection
Hi, I'm looking around for open source virus protection software, I saw MailScanner-4.23-11 but it seams that it needs additional 3rd party software to eliminate the viruses. Anybody know of others? Thanks rick -- Rick Bragg Green Mountain Network http://www.gmnet.net -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list
RE: Virus protection
Just plug-in clamav -Original Message- From: rbragg [mailto:[EMAIL PROTECTED] Sent: Thursday, October 09, 2003 10:56 AM To: [EMAIL PROTECTED] Subject: Virus protection Hi, I'm looking around for open source virus protection software, I saw MailScanner-4.23-11 but it seams that it needs additional 3rd party software to eliminate the viruses. Anybody know of others? Thanks rick -- Rick Bragg Green Mountain Network http://www.gmnet.net -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list
Re: Virus protection
rbragg wrote: Hi, I'm looking around for open source virus protection software, I saw MailScanner-4.23-11 but it seams that it needs additional 3rd party software to eliminate the viruses. Anybody know of others? Thanks rick There is quite a bit about this in the archives: http://marc.theaimsgroup.com/?l=redhat-listw=2r=1s=virus+protection+softwareq=b HTH, Bill -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list
Re: Virus protection
On Thu, 9 Oct 2003, rbragg wrote: Hi, I'm looking around for open source virus protection software, I saw MailScanner-4.23-11 but it seams that it needs additional 3rd party software to eliminate the viruses. Anybody know of others? ClamAV - http://clamav.sourceforge.net/ --jeremy -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list
Re: Virus protection
On Thu, Oct 09, 2003 at 10:55:53AM -0400, rbragg wrote: I'm looking around for open source virus protection software, I saw MailScanner-4.23-11 but it seams that it needs additional 3rd party software to eliminate the viruses. Anybody know of others? Linux does not need virus protection, really. That's an MS specific problem. That being said, procmail can do wonders. Week to Date Spam and Virus Summary Sun Oct 5 04:09:40 thru Thu Oct 9 11:25:36 EDT 2003 Postfix Rejected: 837 Bogofied: 193 Procmail Filtered: 37 Spams missed:1 Total Spams: 1068 Spams Blocked:1067 Percent Blocked: 99.90% Viruses Stopped: 262 -- That's 262 for procmail - /dev/null, zero for my mailboxes. Very simple, really, at least with the mail I tend to get. -- Hal Burgiss -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list
RE: Virus protection
I'm looking around for open source virus protection software, I saw MailScanner-4.23-11 but it seams that it needs additional 3rd party software to eliminate the viruses. Anybody know of others? Linux does not need virus protection, really. That's an MS specific problem. Aren't Li0n, Linux.Vit.4096, Linux.Diesel, OSF.8759, Slapper, Scalper, Linux.Svat, BoxPoison, Ramen and even Klez all *nix based or cross-platform viruses? Viruses are NOT a MS specific problem... Christian Christian Campbell Systems Engineer Information Technology Department - Systems Group Bruegger's Enterprises Desk: (802) 652-9270 Cell: (802) 734-5023 Email: ccampbell at brueggers dot com PGP public key available via PGP keyservers or http://www2.brueggers.com/pgp/ccampbell.html We all know Linux is great...it does infinite loops in 5 seconds. -- Linus Torvalds -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list
Re: Virus protection
I'm looking around for open source virus protection software, I saw MailScanner-4.23-11 but it seams that it needs additional 3rd party software to eliminate the viruses. Anybody know of others? Linux does not need virus protection, really. That's an MS specific problem. Absolutely incorrect. From my box, when I check out the number of virii that I am protected from by f-prot: [EMAIL PROTECTED] benjamin]$ f-prot -virno SIGN.DEF created 9 October 2003 SIGN2.DEF created 9 October 2003 MACRO.DEF created 6 October 2003 DOS/Windows: 25681 viruses and 40737 Trojans Word/Excel: 7961 viruses and Trojans Java: 2 viruses and 124 Trojans BAT: 2070 viruses and Trojans IRC INI: 1176 viruses and Trojans Script: 3662 viruses and Trojans INF: 5 viruses and Trojans Unix shell: 242 viruses and Trojans Ami: 2 viruses and Trojans WinBat: 4 viruses and Trojans PIF: 19 viruses and Trojans PalmOS: 4 viruses and Trojans PHP: 11 viruses and Trojans Unix: 266 viruses and Trojans In addition, over 15750 viruses are identified using generic identification, so the total number of viruses and Trojans known to F-PROT is somewhere over 97700. Notice the word Unix above... Ben -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list
Re: Virus protection
- Original Message - From: rbragg [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 09, 2003 7:55 AM Subject: Virus protection Hi, I'm looking around for open source virus protection software, I saw MailScanner-4.23-11 but it seams that it needs additional 3rd party software to eliminate the viruses. Anybody know of others? Thanks rick -- Rick Bragg Green Mountain Network http://www.gmnet.net I use Vexira's vamilter plugin for Sendmail. I believe they also have full Qmail and Postfix functionality too. Fee for use but it works well and the Resources overhead is minute... Best of Luck! Eucke Warren Today's quote: The software package said 'REQUIRES WINDOWS 9X OR BETTER' so I installed Linux -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list
RE: Virus protection
On Thu, 2003-10-09 at 11:43, Christian Campbell wrote: I'm looking around for open source virus protection software, I saw MailScanner-4.23-11 but it seams that it needs additional 3rd party software to eliminate the viruses. Anybody know of others? Linux does not need virus protection, really. That's an MS specific problem. Aren't Li0n, Linux.Vit.4096, Linux.Diesel, OSF.8759, Slapper, Scalper, Linux.Svat, BoxPoison, Ramen and even Klez all *nix based or cross-platform viruses? Viruses are NOT a MS specific problem... Christian To add fuel to Christians fire. When Melissa came out, everything on a samba share got hosed as well. Yes it's true that virii and worms are more rare on linux platform, and it's usually an exploit in an associated program (ie... openssl, apache...) Linux will be targeted more and more now that it's user base is expanding. Is Linux more secure, probably. It's depends if the user is a root whore. That doesn't take into account exploits in running services. We're using spamassassin, exim, clamav, and amavis to check incoming mail. It doesn't hurt that everyone here also runs the evolution mail client, which as a side note...rocks! -- Michael Gargiullo [EMAIL PROTECTED] Warp Drive Networks -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list
Re: Virus protection
On Thursday 09 October 2003 11:27, Hal Burgiss wrote: On Thu, Oct 09, 2003 at 10:55:53AM -0400, rbragg wrote: I'm looking around for open source virus protection software, I saw MailScanner-4.23-11 but it seams that it needs additional 3rd party software to eliminate the viruses. Anybody know of others? Linux does not need virus protection, really. That's an MS specific problem. I think what we are dealing with is a difference in in terminology. PC's running MS products - Virus or Trojans Mac's - Virus or Trojans *UX - exploits or security vulnerabilities They are ALL flaws in the installed software or code designed to do undesirable (understated I know) things on our computer systems. -- Leon Sonntag Systems Administrator -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list
Re: Virus protection
On Thu, Oct 09, 2003 at 10:57:47AM -0500, Benjamin J. Weiss wrote: Notice the word Unix above... /yawn ... find me someone -- anyone -- who has had a system infected via email+attached virus on a *nix system. A live person please, and not theories or reports from vendors with vested interests protecting an entire industry built around really shoddily designed software. Over and above that, I don't beleive the inherent MS design flaw of auto-executing binary email attachments is even possible on Nix (is it?). -- Hal Burgiss -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list
Re: Virus protection
On Thu, Oct 09, 2003 at 11:59:30AM -0400, Michael Gargiullo wrote: To add fuel to Christians fire. When Melissa came out, everything on a samba share got hosed as well. Samba is a bastard protocol only necessary on mixed networks and only due to MS's dominance, and anyone who can, is better off avoiding it, and its inherent MS-type problems altogether. -- Hal Burgiss -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list
Re: Virus protection
via email+attached virus on a *nix system. A live person please, and not theories or reports from vendors with vested interests protecting an entire industry built around really shoddily designed software. Over and above that, I don't beleive the inherent MS design flaw of auto-executing binary email attachments is even possible on Nix (is it?). It's possible, but the current market of stupid users on Unix is not large enough to attract the number of stupid developers Windows has. Jon -- Hal Burgiss -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list
Re: Virus protection
On Thu, Oct 09, 2003 at 10:57:47AM -0500, Benjamin J. Weiss wrote: Notice the word Unix above... /yawn ... find me someone -- anyone -- who has had a system infected via email+attached virus on a *nix system. A live person please, and not theories or reports from vendors with vested interests protecting an entire industry built around really shoddily designed software. Over and above that, I don't beleive the inherent MS design flaw of auto-executing binary email attachments is even possible on Nix (is it?). Wow, Hal, guess've just slept the last year or so. Ever heard of Slapper? At one point it had infected at least 13,000 distinct machines: http://www.cert.org/advisories/CA-2002-27.html http://www.f-secure.com/slapper/ I didn't have time to dig any deeper for other worms, but I'm sure that you can find more in Google. Don't get me wrong, one reason I love linux is because it's more secure. But that does NOT equate to bullet proof. Ben -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list
Re: Virus protection
Benjamin J. Weiss said: Wow, Hal, guess've just slept the last year or so. Ever heard of Slapper? At one point it had infected at least 13,000 distinct machines: I've missed most of this thread, but it seemed to me that the point is that viruses don't spread on Linux via e-mail/attachments, the way that, say, Klez or Blaster do. The mechanism of Slapper's spread (and the very few other worms that infect Linux/Unix hosts) is very, very different. Outlook is built to support the spread of worms and viruses, but there is no equivalent function in Linux -- unless it's supported by a heavy dose of social engineering (I promise, when you save this attachment and change its permissions to executable and log in a root and run this program, it'll be really really cool! I promise!). :) Having said that, it's a good idea to have at least *some* degree of virus protection on your *nix system. Most infections have to be cleaned out by hand, but if you run a mail server (or even a little mailhost in your house like I do), it can be a startlingly good idea to put some sort of virus protection tool on it, if only to prevent any viruses from spreading among your networked computers that are infected with Outlook -- er, I mean, with worms. Sliante, Richard S. Crawford http://www.mossroot.com http://www.stonegoose.com/catseyeview AIM: Buffalo2K ICQ: 11646404 Y!: rscrawford MSN: [EMAIL PROTECTED] Howard Dean for America: http://www.deanforamerica.com It is only with the heart that we see rightly; what is essential is invisible to the eye. --Antoine de Saint Exupéry -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list
Re: Virus protection
Benjamin J. Weiss said: Wow, Hal, guess've just slept the last year or so. Ever heard of Slapper? At one point it had infected at least 13,000 distinct machines: I've missed most of this thread, but it seemed to me that the point is that viruses don't spread on Linux via e-mail/attachments, the way that, say, Klez or Blaster do. The mechanism of Slapper's spread (and the very few other worms that infect Linux/Unix hosts) is very, very different. Outlook is built to support the spread of worms and viruses, but there is no equivalent function in Linux -- unless it's supported by a heavy dose of social engineering (I promise, when you save this attachment and change its permissions to executable and log in a root and run this program, it'll be really really cool! I promise!). :) Having said that, it's a good idea to have at least *some* degree of virus protection on your *nix system. Most infections have to be cleaned out by hand, but if you run a mail server (or even a little mailhost in your house like I do), it can be a startlingly good idea to put some sort of virus protection tool on it, if only to prevent any viruses from spreading among your networked computers that are infected with Outlook -- er, I mean, with worms. My argument wasn't the method of propagation or the difference between a virus and a worm. My response was to his assertion that you didn't need virus protection on a linux machine. In my experience, complacency leads inevitably to disaster. Ben -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list
Re: Virus protection
On Thu, Oct 09, 2003 at 03:03:41PM -0500, Benjamin J. Weiss wrote: it?). Wow, Hal, guess've just slept the last year or so. Ever heard of Slapper? At one point it had infected at least 13,000 distinct machines: http://www.cert.org/advisories/CA-2002-27.html $ dog http://www.cert.org/advisories/CA-2002-27.html |grep -i virus $ $ dog http://www.cert.org/advisories/CA-2002-27.html |grep -i mail send mail to ahref=mailto:[EMAIL PROTECTED][EMAIL PROTECTED]/awith the following text included in the subject line: a href=mailto:[EMAIL PROTECTED][CERT#23820]/a./p href=mailto:[EMAIL PROTECTED]AllenHouseholder/a bEmail:/b a href=mailto:[EMAIL PROTECTED][EMAIL PROTECTED]/abr email. Our public PGP key is available from To subscribe to the CERT mailing list for advisories and bulletins,send email to A HREF=mailto:[EMAIL PROTECTED][EMAIL PROTECTED]/A. Please include in the body of your $ That page does not seem to reference either viruses or email attachments. So -- Hal Burgiss -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list
Re: Virus protection
On Thu, Oct 09, 2003 at 01:11:27PM -0700, Richard Crawford wrote:
I've missed most of this thread, but it seemed to me that the point is
that viruses don't spread on Linux via e-mail/attachments, the way that,
say, Klez or Blaster do. The mechanism of Slapper's spread (and the very
few other worms that infect Linux/Unix hosts) is very, very different.
Precisely, and the means to combat slapper is not with ClamAV (or is
it?).
The OP was not clear what his ultimate objective was...
If he is protecting a standalone Linux system or *nix only network, he
probably does not need to worry about *viruses* ala the MS variety
infecting his *nix systems via email attachments. There are things to
worry about, but this is not one of them.
If he has a mixed network, and mail is moving through the Linux system
to MS systems, and he wants to protect MS systems, there are many,
many ways to do this. Procmail works fine, in fact. It is quite easy
to take an all or none approach with it and just delete mail as one
wishes. It is not so easy to discriminate legit exe type attachments
(is there such a thing?), from malicious such attachments. If that is
the need, then one of the AV packages might be in order. There are
procmail recipes around that ID the more common viruses:
## Microsoft support virus, W32/Gibe-F I think, 18/9/03
:0 B
* ^AGiEo0AAZKEAUGSJJQBRUbhQFAAA6FSUAABTVleJZegz24ld/It9DIgfjYWs6///UGgA$
{ LOG=Virus W32/Gibe-F:
:0
/dev/null
}
That one grabs some other viruses as well, apparently with borrowed code.
--
Hal Burgiss
--
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list
Re: Virus protection
On Thu, Oct 09, 2003 at 03:29:16PM -0500, Benjamin J. Weiss wrote: My argument wasn't the method of propagation or the difference between a virus and a worm. My response was to his assertion that you didn't need virus protection on a linux machine. You don't! Plain and simple. I do it just to keep the noise volume down in my mailbox[es]. The second week of W32/Gibe-F, procmail deleted ~6600 infected mails from my personal mailbox. Its not that I worry about infection, but its easier than manually deleting the bugges. In my experience, complacency leads inevitably to disaster. Probably..but knowledge eventually leads to wisdom. -- Hal Burgiss -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list
Re: Virus protection
On Thu, Oct 09, 2003 at 11:43:00AM -0400, Christian Campbell wrote: I'm looking around for open source virus protection software, I saw MailScanner-4.23-11 but it seams that it needs additional 3rd party software to eliminate the viruses. Anybody know of others? Linux does not need virus protection, really. That's an MS specific problem. Aren't Li0n, Linux.Vit.4096, Linux.Diesel, OSF.8759, Slapper, Scalper, Linux.Svat, BoxPoison, Ramen and even Klez all *nix based or cross-platform viruses? Viruses are NOT a MS specific problem... Yes, they are!!! Some of those listed aren't even viruses (eg slapper). Some that are, are supiciously only found by AV vendors (ie did they write them in order to sell a product...h). The others can't be spread via email attachments (as is the case that started this thread). So the email/virus thing, is purely an MS one, and one that could easily be prevented. But that would hurt a certain revenue stream. We must maintain some illusions for the masses, lest they though go blitheringly mad, and forget to fork out that dough to MS and Assoc. -- Hal Burgiss -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list
Re: Virus protection again.
There are many people out there that use one of the amavis variants with a scan engine to do this sort of work. I use amavisd with sendmail-milter and Trophie, this combination with a decent machine could easily handle 50k+ emails per day. On Wed, 28 Aug 2002 12:23:24 -0500 (CDT), you wrote: I know that there are products out there that I can use to protect the server and one or two email accounts but I am using my mail server to serve 2000 customers. I need virus protection that will protect all of them incoming and outgoing. Any good suggestions.?? -- Scott Skrogstad Computer Integration Inc, [EMAIL PROTECTED] 800-522-3475 Phone http://race.coiinc.com -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe https://listman.redhat.com/mailman/listinfo/redhat-list
Re: Virus protection again.
hi, * Scott Skrogstad ([EMAIL PROTECTED]) wrote: I know that there are products out there that I can use to protect the server and one or two email accounts but I am using my mail server to serve 2000 customers. I need virus protection that will protect all of them incoming and outgoing. Any good suggestions.?? Checkout this combination postfix - amavisd - fprot rk -- - Ramakrishna | [EMAIL PROTECTED] Exocore Consulting | http://www.exocore.com Bangalore, India| +91 (80) 344-0397 - -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe https://listman.redhat.com/mailman/listinfo/redhat-list
Re: Virus protection again.
ramakrishna wrote: hi, * Scott Skrogstad ([EMAIL PROTECTED]) wrote: I know that there are products out there that I can use to protect the server and one or two email accounts but I am using my mail server to serve 2000 customers. I need virus protection that will protect all of them incoming and outgoing. Any good suggestions.?? Checkout this combination postfix - amavisd - fprot rk -- - Ramakrishna | [EMAIL PROTECTED] Exocore Consulting | http://www.exocore.com Bangalore, India| +91 (80) 344-0397 - I use the same combo with 400 accounts on a small server and works like a breeze. HTH -- Francisco Neira B. Administrador de Red Defensoria del Pueblo Lima, Peru, -05:00 UTC -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe https://listman.redhat.com/mailman/listinfo/redhat-list
Re: Virus protection again.
From: Francisco Neira [EMAIL PROTECTED] I use the same combo with 400 accounts on a small server and works like a breeze. me too, Postfix + Amavisd, but with Mc Affee's uvscan as antivirus and at my prevoius job the mail server run the same with 1500 accounts regards, juan -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe https://listman.redhat.com/mailman/listinfo/redhat-list
Virus protection again.
I know that there are products out there that I can use to protect the server and one or two email accounts but I am using my mail server to serve 2000 customers. I need virus protection that will protect all of them incoming and outgoing. Any good suggestions.?? -- Scott Skrogstad Computer Integration Inc, [EMAIL PROTECTED] 800-522-3475 Phone http://race.coiinc.com -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe https://listman.redhat.com/mailman/listinfo/redhat-list
Re: Virus protection again.
From: Scott Skrogstad [EMAIL PROTECTED] I know that there are products out there that I can use to protect the server and one or two email accounts but I am using my mail server to serve 2000 customers. I need virus protection that will protect all of them incoming and outgoing. Any good suggestions.?? I'm using Postfix as MTA (www.postfix.org), which I've found being much more faster, secure and configurable than sendmail, it never falls down.. for virus scanning I'm using amavisd (www.amavis.org) as content filter with Mc Affee's uvscan antivirus for Linux Amavisd supports lots of antivirus programs, check on their webpage.. it can also be used with sendmail, exim and maybe others, check the page too.. if not, on Postfix's page in the section Add-on Software there are others... Panda Antivirus has also a mail virus scanner for Postfix which you can download from their page.. Regards, Juaid -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe https://listman.redhat.com/mailman/listinfo/redhat-list
Re: What are you doing for virus protection
Scott Skrogstad wrote: I run a small ISP and of course my customers have asked me to put up some virus protection on my server. I was just trying to get some info from the list what everyone is using. I am not a linux guru so something RPM would be nice and that has regular updates. I was talking over this topic with a friend a couple of days ago and he is doing all his virus scanning on the Unix server, as it make sense to scan the files directly on the file server. (They're running SAMBA on a Solaris box.)Virus file updates for Sophos are retrieved by wget, and used by the scanning engine when it runs via cron. At present they are relying on the virus software running on the PCs to intercept any viruses in newly arriving email. This is not an RPM level of ease, but it seems to be working reasonably well for them. Alan -- Alan Peery Unix sysadmin since 1987 [EMAIL PROTECTED] ___ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list
What are you doing for virus protection
I run a small ISP and of course my customers have asked me to put up some virus protection on my server. I was just trying to get some info from the list what everyone is using. I am not a linux guru so something RPM would be nice and that has regular updates. -- Scott Skrogstad Computer Integration Inc, [EMAIL PROTECTED] 800-522-3475 Phone http://www.mysteryelephant.com ___ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list
RE: What are you doing for virus protection
Hi, the few I know: - Don't go over the internet as root. - Put an IDS (as tripwire) on your linux machine (against trojans) - Be aware of patchs, new releases and then upgrade. - Linux don't fear a lot of virus 3 or 6 I believe. If infected, the only touched will be the one who's logged on. - Worm can also disturb bandwith (and probably other task) but they're not critical. - Put a firewall The more dangerous is TROJAN and CRACKERS. (By the way, where can I find a guru ? _Matrix's_Smiley_ ) So, OMHO, bbsc, ism -Message d'origine- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]De la part de Scott Skrogstad Envoye : jeudi 16 mai 2002 14:40 A : Red Hat Mailing list Objet : What are you doing for virus protection I run a small ISP and of course my customers have asked me to put up some virus protection on my server. I was just trying to get some info from the list what everyone is using. I am not a linux guru so something RPM would be nice and that has regular updates. -- Scott Skrogstad Computer Integration Inc, [EMAIL PROTECTED] 800-522-3475 Phone http://www.mysteryelephant.com ___ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list ___ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list
RE: What are you doing for virus protection
I should be a little clearer on what I am trying to protect. I am really trying to protect the incoming and out going email of my users. Not so much the Linux box it self. Sorry for the confusion. On Thu, 16 May 2002, Ismael Touama wrote: Hi, the few I know: - Don't go over the internet as root. - Put an IDS (as tripwire) on your linux machine (against trojans) - Be aware of patchs, new releases and then upgrade. - Linux don't fear a lot of virus 3 or 6 I believe. If infected, the only touched will be the one who's logged on. - Worm can also disturb bandwith (and probably other task) but they're not critical. - Put a firewall The more dangerous is TROJAN and CRACKERS. (By the way, where can I find a guru ? _Matrix's_Smiley_ ) So, OMHO, bbsc, ism -Message d'origine- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]De la part de Scott Skrogstad Envoye : jeudi 16 mai 2002 14:40 A : Red Hat Mailing list Objet : What are you doing for virus protection I run a small ISP and of course my customers have asked me to put up some virus protection on my server. I was just trying to get some info from the list what everyone is using. I am not a linux guru so something RPM would be nice and that has regular updates. -- Scott Skrogstad Computer Integration Inc, [EMAIL PROTECTED] 800-522-3475 Phone http://www.mysteryelephant.com ___ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list
RE: What are you doing for virus protection
On Thu, 16 May 2002, Scott Skrogstad wrote: I should be a little clearer on what I am trying to protect. I am really trying to protect the incoming and out going email of my users. Not so much the Linux box it self. I've used InoculateIT in the past, works well. But it depends on the mail engine you use as to how you tie the AV engine in. I'm currently using Inoc 4.x + Amavis + Postfix. Works a charm. I've also used Trend Microscan in the past, but InoculateIT impresses me more. I've also heard from the Postfix list that Sophos + Sophie is decent. -- Sapere aude My mind not only wanders, it sometimes leaves completely. Never attribute to malice that which can be adequately explained by stupidity. ___ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list
Re: What are you doing for virus protection
On Thu, May 16, 2002 at 10:18:07AM -0500, Scott Skrogstad wrote: I should be a little clearer on what I am trying to protect. I am really trying to protect the incoming and out going email of my users. Not so much the Linux box it self. MailScanner has worked well for me. I've also contacted a sales type at Sophos who's very interested in working out reasonable deals with Linux users, if you're interested. (Nothing in it for me, BTW.) Cheers, -- Dave Ihnat [EMAIL PROTECTED] ___ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list
Server Virus Protection
Hey list, I was wondering if there is any software (preferably free) that you can run on a linux server (our mail server actually) that can detect and remove Windows-based virii before a user checks their mail? I have to believe that some company has something like that by now. Thanks, Jeff Graves Customer Support Engineer Image Source, Inc. 10 Mill Street Bellingham, MA 02019 Phone - (508) 966-5200 #31 Fax - (508) 966-5170 Email - [EMAIL PROTECTED] ___ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list
Re: Server Virus Protection
http://www.hbedv.com/ eric - Original Message - Hey list, I was wondering if there is any software (preferably free) that you can run on a linux server (our mail server actually) that can detect and remove Windows-based virii before a user checks their mail? I have to believe that some company has something like that by now. Thanks, Jeff Graves Customer Support Engineer Image Source, Inc. 10 Mill Street Bellingham, MA 02019 Phone - (508) 966-5200 #31 Fax - (508) 966-5170 Email - [EMAIL PROTECTED] ___ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list ___ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list
Re: Server Virus Protection
Hi, You could use Amavis (www.amavis.org). You will need an antiviral package such as Mcaffee for Linux, or try the one from www.hbedv.com. HBEDV also have a gateway that will scan incoming/outgoing mail from your server. It is not difficult to install, and works well. Their update files are few and far between though, so I run both Mcafee and the HBEDV offering. Regards Enrico - Original Message - From: "Jeff Graves" [EMAIL PROTECTED] To: "Redhat" [EMAIL PROTECTED] Sent: Wednesday, March 07, 2001 5:16 PM Subject: Server Virus Protection Hey list, I was wondering if there is any software (preferably free) that you can run on a linux server (our mail server actually) that can detect and remove Windows-based virii before a user checks their mail? I have to believe that some company has something like that by now. Thanks, Jeff Graves Customer Support Engineer Image Source, Inc. 10 Mill Street Bellingham, MA 02019 Phone - (508) 966-5200 #31 Fax - (508) 966-5170 Email - [EMAIL PROTECTED] ___ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list ___ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list
