Do Linux Anti-Virus Packages Make a Difference?
I would like to describe our server environment and then ask a question about Linux anti-virus software:
Only one of our servers uses a web interface for bill lookup, and traffic to that server is controlled through by a firewall and an apache system inside the firewall that acts as a web router.
Other than web access to that one server, the only other access permitted is through ssh and telnet, and that access is only allowed inside our firewall. No one is running X to access these systems, nor is any browsing going on at these servers' consoles. None of the servers provide storage via samba or nfs.
I can understand looking into rootkit hunter software after reading some of the anti-spyware/anti-virus links. However, should we be running any kind of anti-virus software?
I understand why a Linux server might run anti-virus software if samba shares were being served. From what I've read, and I have looked over some of the 2005-dated articles, running anti-virus on a Linux system does not accomplish much, or have things changed drastically since 2005?