LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices

Reply
 
Search this Thread
Old 04-28-2006, 12:58 AM   #1
HGeneAnthony
Member
 
Registered: Mar 2003
Posts: 178

Rep: Reputation: 30
Is clam anti-virus a decent product


I was thinking about setting up a Linux server as a VPN, a caching server, a network intrusion detection system, and also using it as an anti-virus program to filter data before it gets to the client machines. I was wondering if you think this is a good idea? Also the Windows version of clam anti-virus doesn't get to many favorable reviews. I was wondering if the Linux version is any better and whether it filters for Windows viruses. Do you think it's a good choice? Suggestions?
 
Old 04-28-2006, 01:36 AM   #2
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,373

Rep: Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962
Clam has a great reputation. Many costly network appliances offer clam as an integrated virus scanning engine, along side the likes of mcaffee and f-secure. good idea all round i'd say, just be sure that the server you run it on can handle the load.
 
Old 04-28-2006, 03:27 AM   #3
HGeneAnthony
Member
 
Registered: Mar 2003
Posts: 178

Original Poster
Rep: Reputation: 30
Reply

It's not a huge network, less than 20 machines in all. My main concern is whether clam can detect Windows specific viruses. The machine I was thinking of would be about a gig with 256MB RAM. Think this is sufficent?
 
Old 04-28-2006, 04:03 AM   #4
sunpascal
Member
 
Registered: Jan 2005
Distribution: Debian
Posts: 104

Rep: Reputation: 15
I believe clam can find windows viruses, check their web site, the should have that info.
The necessary server speed depends on how much and what kind of traffic you have.
 
Old 04-28-2006, 06:05 AM   #5
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,373

Rep: Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962
virus scanning is about recognising identifiable traits in network data, you don't need to have any interest in the formats of the data or anything, just see signatures in what ever it is you're looking at.
 
Old 04-28-2006, 06:26 AM   #6
sunpascal
Member
 
Registered: Jan 2005
Distribution: Debian
Posts: 104

Rep: Reputation: 15
It won't identify viruses in attachments of encrypted emails (ssl), will it?
 
Old 04-28-2006, 09:20 AM   #7
HGeneAnthony
Member
 
Registered: Mar 2003
Posts: 178

Original Poster
Rep: Reputation: 30
Reply

I got that Virus Scanning is about matching signatures but I wasn't sure if the *nix version came with the Windows signatures or if there's a way I can add them. Reviews for the Windows version weren't very good so I don't know if the *nix version is any better. I also read that Clam can only detect viruses when a check is run, it won't stop you from running a program. So I was wondering if it can catch data as it hits the system.
 
Old 04-29-2006, 02:38 PM   #8
basileus
Member
 
Registered: Nov 2004
Location: Turku, Finland
Distribution: Debian, Ubuntu, Gentoo
Posts: 388

Rep: Reputation: 30
ClamAV is not ment to be a replacement for desktop antivirus programs. Last time I checked (the Unix version) it did not include realtime protection like most popular Windows antivirus programs (F-secure, McAfee, Norton etc). It is, however, quite useful in gateway computers (email servers and such) to prevent viruses from coming into the local network. Of course it can be used to do ordinary virus scans. For these purposes it is quite usable.

The Unix version does include virus signatures for Windows viruses; in fact, the vast majority of computer viruses are designed for Windows, so an antivirus program without Windows virus signatures would be next to useless.

I'm not sure about the SSL problem - check ClamAV website for that.
 
Old 04-29-2006, 05:01 PM   #9
mrcheeks
Senior Member
 
Registered: Mar 2004
Location: far enough
Distribution: OS X 10.6.7
Posts: 1,690

Rep: Reputation: 50
clamav has real time(ie scan on access) virus protection. You need to install and configure the dazuko kernel module. I use avast antivirus http://www.avast.com//i_kat_207.php?lang=ENG&fnc=finish. I tried f-prot, clamav, bitdefender, antivir and others and i was quite satisfied with clamav. I use avast because like bitdefender i knew it when using windows. It is also easy to create a slackware or debian package from the avast rpm file with only gtk2 as dependency.
 
  


Reply

Tags
clamav, server


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: Microsoft Anti-Spyware Deleting Norton Anti-Virus LXer Syndicated Linux News 0 02-13-2006 04:31 AM
Clam Anti-Virus jspaceman Slackware 3 03-28-2005 10:57 AM
Boot virus or Anti-Virus? AVG Free Anti-Virus Software problems SparceMatrix Linux - Security 9 08-02-2004 02:35 PM
Clam Anti-Virus database down? jspaceman Linux - Software 3 03-23-2004 02:53 AM
Creating an ultimate anti-virus and anti-spam email gateway markcc Linux - Networking 2 10-08-2003 03:10 AM


All times are GMT -5. The time now is 11:10 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration