LinuxQuestions.org - Free Virus Program For Linux

Quote:

Originally posted by andre_bergh
-- snip
Where can i find free antivirus software for linux, and what do i need to keep my new linux pc protected from all the bad things out there?

Thanx...

ClamAV runs in real time but the data files lag quite a bit. I run chkrootkit from a cron script throughout the day. I also run portsentry, and tcpspy -- because I can. I once saw a Red Hat machine (of mine) get rooted after being connected to the WAN for 20 minutes. Those who recall an apache vulnerability in r near July of 1992 will know why. On that note -- since I run Debian (no more RH for other reasons) -- I also run apt-gets regularly and include the security URL in my sources.list. Finally, I also have installed apt-buglist, which I've foud useful. I make the time to find out what is behind the notices in apt-buglist because the alternative would be taking the time to rebuild a compromised host, then disinfect what I need to recover.

The primary line of defense is a stateful firewall built using iptables. This is actually much easier to set up that it might seem, at first, by cheating. Redhat comes with lokkit. You can install lokkit, run it to create a base configuration, save the rules created, backup the rulesets, remove and purge lokkit, then tweak your rules.

The only thing that makes an installation vulnerable is inadequate administration. There is no such thing as secure but there are a few reasons why some people believe otherwise. Of those, one common reason is inexperience and another common reasons is not understanding the book by Garfinkel, Spafford and Schwartz. (Unix and Internet Security, 3rd Ed. O'Reilly. 2003. 954 pps)

I -- for one -- believe it is time to reflect inward; time to consider Harishankar's sig line, which reads, "The wise man chooses to keep silent when the fools go out to scream. --- Ancient Proverb"

The reason for my gloom? Maybe gloom is too strong word. Has anyone in this thread heard of a forkbomb? Go here: http://www.securityfocus.com/columnists/308. You see, in the threads I've read so far, we are ripping at MS, rather than pointing to facts that show them the error in their thnking. We call MS spokespeople liars when -- in fact -- what got stated was (at best) a bunch of weasel words that had no weight until we got all pissy about them.

As to the forkbomb -- I never new it had a name. If you read the article (its short) you'll realize where I'm coming from.

-- John