Linux Virus scanners for Servers, for Windows viruses?

NetRAVEN5000 · 05-05-2006, 07:27 PM

I recently set up a Linux file server in the basement. Yeah, all the Windows PCs connecting to it have Norton AntiVirus protecting them, but still. . . the more protection the better - plus, some files will be being put there in Linux, then run in Windows.

Are there any Linux virus scanners for Windows virii that I can run on my server? Preferably with a Webmin interface. . .

Also, I haven't worked with cron much. . . how would I set it up to run a program on a regular basis - say, at 12:00 midnight every night?

Server's running (a VERY slimmed down) Slackware 10.2 with 2.6.16.9 kernel BTW.

tomdkat · 05-05-2006, 07:30 PM

Check out ClamAV.

Peace...

pljvaldez · 05-05-2006, 07:34 PM

there's a few. F-Prot and ClamAV come to mind, although I'm sure there are more. Not sure if any of these have webmin interface... ClamAV seems to have one.

crontab -e as root will bring up your text editor. Then just enter

0 0 * * * /path/to/program -options -whatever >> /home/username/output.log 2>&1

The columns on the left are minute, hour, day of month, month, day of week

bigrigdriver · 05-05-2006, 07:37 PM

Antivir (commercial, with antivir-workstation free license for home use). I get daily update e-mails. Updates run through cron.

For e-mail virus scanners, clamAV and amavisd. All work together with SpamAssassin, fetchmail, and postfix to protect networks with Linux server and various platforms behind the server. Linux filters, then passes the rest on to the network.

Current antivir virus definition file is something 1.9 meg, mostly devoted to protection windows machines. Anything that gets past the Linux server will hopefully be caught by whatever protection is on the windows machine.

NetRAVEN5000 · 05-07-2006, 12:35 PM

Dam, I broke it!

Using such a small HD (1.5GB) makes it tough to pick and choose which packages to keep, especially when you need an extra couple MB to upgrade them. . .

I'll have it back up and running in a bit though (I upgraded to a 2GB drive - not much bigger but it should be enough).

Thanks for the suggestions though! I'll let you know how it works when I'm done.

dmartins · 05-07-2006, 12:53 PM

If you are using samba for the file server it can be setup to do on-access scanning. I know for sure that it works with ClamAV. It does slow down samba a bit but other than that it works quite nicely.

NetRAVEN5000 · 05-07-2006, 06:18 PM

Quote:

Originally Posted by dmartins

If you are using samba for the file server it can be setup to do on-access scanning. I know for sure that it works with ClamAV. It does slow down samba a bit but other than that it works quite nicely.

No thanks, the server's already slow enough (it's a 200MHz machine!)

mrcheeks · 05-07-2006, 06:40 PM

You can install the dazuko kernel module and do some on-access scanning with any antivirus supporting dazuko like clamav, antivir or avast.