[Snort-users] Anti Virus on Linux?

Bob McClure Jr robertmcclure at ...741...
Mon Jan 27 10:57:03 EST 2003


On Mon, Jan 27, 2003 at 12:32:13PM -0600, Bob McDowell wrote:
> 
> This isn't exactly confined to snort, but what do you guys run for AntiVirus
> on your Linux-based snort boxes?  I understand that there are some 'free for
> non-commercial use' options out there, but I'm looking for a good commercial
> product - if there is one.  If not, anything is better than nothing.  Isn't
> it?  Unless of course there is some reason not to run AV on a snort box...
> 
> 
> 
> Bob McDowell
> IS Specialist
> Cox HealthPlans, LLC
> 417.269.2848

Well, Linux, as such, doesn't need AV protection because it's pretty
much immune.  But if you're running a mail server for Windoze boxes,
you can use ClamAntiVirus,

http://clamav.elektrapro.com/

(it's GPLed) along with a Perl script and procmail.  I set up such a
thing for my local ISP, and it catches all incoming viruses.  Outgoing
isn't covered, but I figure if you catch it coming in the door, you
don't have to worry much about it going out the door.

Cheers,
-- 
Bob McClure, Jr.             Bobcat Open Systems, Inc.
robertmcclure at ...741...  http://www.cumbytel.com/~bobcatos/
Peace at any price is inflationary.




More information about the Snort-users mailing list