10
votes

We have an Ubuntu file server in a small network that is serving about 8 Windows clients.

First, is it necessary to have a virus scanner on the server, or just rely on the clients (currently using AVG)?

If it is best to have virus scanning on the file server, what is a good scanner for a Linux Samba server?

4
  • Linux! Viruses say it aint so
    – Shard
    May 1, 2009 at 7:25
  • With Windows clients and average users, the files stored on the server may be infected ;-)
    – csjohnst
    May 1, 2009 at 7:27
  • Duplicate of serverfault.com/questions/2213/…
    – Shard
    May 1, 2009 at 12:46
  • I'm sorry... you're saying this question is a duplicate of itself??
    – csjohnst
    May 9, 2009 at 14:09

11 Answers 11

7
votes

ClamAV is generally regarded as a reasonable anti-virus. Although that said it doesn't have herustics (last I checked anyhow). It does however have on-access scanning.

7
votes

Imho ClamAV would be the best choise.

2
  • Would ClamAV help if I'm not running an email server. From the site "Clam AntiVirus is an open source (GPL) anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways" ?
    – Mark
    May 1, 2009 at 12:31
  • I used to run ClamAV for mail, but it also handled regular filesystem scans perfectly happily as well. May 1, 2009 at 12:43
6
votes

Anti-virus on Linux systems really isn't required, the threats just aren't out there for it. However, if you can't get around the corporate mandate, follow Node's advice and just install ClamAV and a small cron job to do a periodic sweep of the system.

4
votes

I also think Anti-virus is not really required on a Linux server, although it is best practice to have it, so you can say you do everything possible to keep things clean. There are exceptions where I would recommend an anti-virus on a linux server though.

Examples would be a mail server (you should scan attachments on your end, and incoming mail) or a file server with outside access (prevent your server hosts contaminated files). Not really for the safety of the server, but for the safety of your end-users getting their stuff off of the server.

1
  • Thanks, you bring up an excellent point about safety for the end-users, I was only thinking in terms of the server getting infected.
    – Mark
    May 1, 2009 at 13:05
3
votes

ESET Antivirus (NOD32) have a linux version available. I've never used it, but the windows version of their software is excellent, and about the best I've seen as far as resource usage goes.

2
votes

If all the clients are Windows, I'd certainly recommend installing some kind of antivirus software on the clients, since they're the most vulnerable.

I use ClamAV on my (samba) fileserver and (squid) proxy servers.

It's very easy to install and use and does a good job.

1
  • Yeah, all the clients are running AVG, this is more of a "just in case" 2nd line of defence
    – csjohnst
    May 1, 2009 at 7:29
1
vote

ESET Antivirus (NOD32) have a linux version available. I've never used it, but the windows version of their software is excellent.

1
vote

I'm a fan of AVG Free for my Windows antivirus needs, and they had a linux client last time I checked. I used it for a bit since I use my server as a file server for my linux and windows clients.

1
vote

ClamAV is good to ensure that your MTA doesn't propagate crap all over the world. This is good practice, it helps keep Windows users safe.

As for AV software on Linux, please read this koan. I strongly advise removing your shoes prior to reading the koan. It is Zen master teaching a Linux computer user who was used to Windows .. really funny.

0
votes

I have some experience with Panda Anti-virus but not much. Seems to work all right.

I also found this article on linux.com.

It recommends:

  • Panda
  • Vexira
  • RAV
  • ServerProtect
  • Sophos
0
votes

I've not used it myself but I have heard that fprot does a good job.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .