10

We have an Ubuntu file server in a small network that is serving about 8 Windows clients.

First, is it necessary to have a virus scanner on the server, or just rely on the clients (currently using AVG)?

If it is best to have virus scanning on the file server, what is a good scanner for a Linux Samba server?

csjohnst
  • 755
  • 1
  • 7
  • 12

11 Answers11

7

ClamAV is generally regarded as a reasonable anti-virus. Although that said it doesn't have herustics (last I checked anyhow). It does however have on-access scanning.

Adam Gibbins
  • 7,147
  • 2
  • 28
  • 42
7

Imho ClamAV would be the best choise.

Node
  • 1,644
  • 1
  • 13
  • 15
  • Would ClamAV help if I'm not running an email server. From the site "Clam AntiVirus is an open source (GPL) anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways" ? – Mark May 01 '09 at 12:31
  • I used to run ClamAV for mail, but it also handled regular filesystem scans perfectly happily as well. – ZombieSheep May 01 '09 at 12:43
6

Anti-virus on Linux systems really isn't required, the threats just aren't out there for it. However, if you can't get around the corporate mandate, follow Node's advice and just install ClamAV and a small cron job to do a periodic sweep of the system.

womble
  • 95,029
  • 29
  • 173
  • 228
4

I also think Anti-virus is not really required on a Linux server, although it is best practice to have it, so you can say you do everything possible to keep things clean. There are exceptions where I would recommend an anti-virus on a linux server though.

Examples would be a mail server (you should scan attachments on your end, and incoming mail) or a file server with outside access (prevent your server hosts contaminated files). Not really for the safety of the server, but for the safety of your end-users getting their stuff off of the server.

Erik van Brakel
  • 386
  • 2
  • 8
  • Thanks, you bring up an excellent point about safety for the end-users, I was only thinking in terms of the server getting infected. – Mark May 01 '09 at 13:05
3

ESET Antivirus (NOD32) have a linux version available. I've never used it, but the windows version of their software is excellent, and about the best I've seen as far as resource usage goes.

Evan
  • 349
  • 1
  • 3
  • 6
2

If all the clients are Windows, I'd certainly recommend installing some kind of antivirus software on the clients, since they're the most vulnerable.

I use ClamAV on my (samba) fileserver and (squid) proxy servers.

It's very easy to install and use and does a good job.

Gert M
  • 1,471
  • 1
  • 15
  • 14
1

ESET Antivirus (NOD32) have a linux version available. I've never used it, but the windows version of their software is excellent.

Evan
  • 349
  • 1
  • 3
  • 6
1

I'm a fan of AVG Free for my Windows antivirus needs, and they had a linux client last time I checked. I used it for a bit since I use my server as a file server for my linux and windows clients.

Daniel Huckstep
  • 529
  • 2
  • 8
  • 18
1

ClamAV is good to ensure that your MTA doesn't propagate crap all over the world. This is good practice, it helps keep Windows users safe.

As for AV software on Linux, please read this koan. I strongly advise removing your shoes prior to reading the koan. It is Zen master teaching a Linux computer user who was used to Windows .. really funny.

Tim Post
  • 1,515
  • 13
  • 25
0

I have some experience with Panda Anti-virus but not much. Seems to work all right.

I also found this article on linux.com.

It recommends:

  • Panda
  • Vexira
  • RAV
  • ServerProtect
  • Sophos
Berek Bryan
  • 394
  • 2
  • 5
  • 11
0

I've not used it myself but I have heard that fprot does a good job.

baudtack
  • 490
  • 1
  • 6
  • 15