landysaccount

[Log in to get rid of this advertisement]

Hello.

I've noticed our LAN is full of viruses spread like crazy and some customer's pc have to be reformatted every other week. They're asking if is our LAN, I say no because my pc is on the same LAN and I haven't get any virus I know of.

I'm curious if theres a program or utility that can be used on a linux router/firewall that would scan all traffic for viruses for especific local ip? With this I'm looking to charge users a small fee to prevent their pc virus free. I don't know if theres really anything like it.

Thanks in advanced for your help.

AsusDave

Try something like Ipcop with Copfilter.
www.ipcop.org

www.copfilter.org

Ipcop is a firewall distro designed to convert a older pc to a firewall/router. Copfilter is an add-on available to offer scanning of web and E-mail traffic.

Seriously though, what you describe is a nightmare. It sounds to me like your users are their own worst enemy. Nothing you put into place at the router level will be able to stop users from doing stupid things and infecting themselves.

IMO, if you are going to charge a fee to keep their machines virus free, do yourself a favor and don't offer a guarantee! It will cost you way more in time saving users from themselves than you will ever make in fees.

HTH
Dave

chiragrk

In most cases you need to find out where the viruses are coming from - Internet? USB Pen drives?

In case of internet, apart from what AsusDave suggested, you could also make use of a Proxy Server + Content filtering (squidguard or dansguardian). This way users on the LAN could be prevented from going into malicious sites.
In case viruses are coming over from pen drives/ external HDDs plugged, you could simply ask the network admin there to disable those hardware - if thats possible.
We had implemented the above 2 and had seen drastic improvement for our office.