samba - Dec 2001 - How do you guys protect Samba shares from Win32 based viruses?

That's pretty much the question.  I've got Symantec
NAVCE running on my NT server protecting itself, the
Windows clients and the Exchange server, but what do i
do about my Linux based Samba server?

Will a linux based AV app search for Win32 based
viruses?

Thanks,
VeKTeReX

Kevin <kevin@mpcf.com> writes:
> That's pretty much the question.  I've got Symantec
> NAVCE running on my NT server protecting itself, the
> Windows clients and the Exchange server, but what do i
> do about my Linux based Samba server?
> 
> Will a linux based AV app search for Win32 based
> viruses?
That's what they do, there are no known Linux viruses in the wild.  

-- 
Trond Eivind Glomsr?d
Red Hat, Inc.

On Thu, 6 Dec 2001, Kevin wrote:
> That's pretty much the question.  I've got Symantec
> NAVCE running on my NT server protecting itself, the
> Windows clients and the Exchange server, but what do i
> do about my Linux based Samba server?
> 
> Will a linux based AV app search for Win32 based
> viruses?
Most Linux AV programs I've looked at search for Win32 based viruses.

I use McAfee and Kaspersky's products. They work well not only for Samba,
but for e-mail as well. Even catches those macro-based crap for
Word/Excel.

Owen

Sophos appears to make an actually on access scanning engine for UNIX. 
Something I've not seen from any of the other vendors.  I have not used
it nor do I know anything about it other than what I read on the
sophos.com website.

At the moment I just have scanning on the Client side, and I run a cron
job to scan the linux box via uvscan that comes with McAfee Active Virus
Defense.  It's just an on-demand scanner, but I run it on the areas
people touch every 3 hours or so.  I know that's not good enough but I'm
guessing it's better than nothing.

Chris Tooley

On Thu, 2001-12-06 at 10:22, Kevin wrote:
> That's pretty much the question.  I've got Symantec
> NAVCE running on my NT server protecting itself, the
> Windows clients and the Exchange server, but what do i
> do about my Linux based Samba server?
> 
> Will a linux based AV app search for Win32 based
> viruses?
> 
> Thanks,
> VeKTeReX
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba

Intercheck or icheckd is not an on access scanner when running on UNIX.  The way
it works is that an Intercheck client sends files to the Intercheck server for
scanning. The client could be an NT/2000/9x etc PC.  The server could be another
NT PC or server, NetWare, Unix etc etc.  There is no Intercheck client for Unix
(yet).

However I believe there is something called "samba-vscan" which is
part of the Open Anti Virus Project which is an OD scanner for Samba shares. 
Have a look on Sourceforge for details.

Cheers
Jon Gerdes


>>> Chris Tooley <ctooley@amoa.org> 06/12/2001 16:33:04
>>>
Sophos appears to make an actually on access scanning engine for UNIX. 
Something I've not seen from any of the other vendors.  I have not used
it nor do I know anything about it other than what I read on the
sophos.com website.

At the moment I just have scanning on the Client side, and I run a cron
job to scan the linux box via uvscan that comes with McAfee Active Virus
Defense.  It's just an on-demand scanner, but I run it on the areas
people touch every 3 hours or so.  I know that's not good enough but I'm
guessing it's better than nothing.

Chris Tooley

On Thu, 2001-12-06 at 10:22, Kevin wrote:
> That's pretty much the question.  I've got Symantec
> NAVCE running on my NT server protecting itself, the
> Windows clients and the Exchange server, but what do i
> do about my Linux based Samba server?
> 
> Will a linux based AV app search for Win32 based
> viruses?
> 
> Thanks,
> VeKTeReX
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Currently exist a vfs module "on acces" scanning.
its in earlier versions but is very stable, and function very well.
giveit a try. 
www.openantivirus.org and looking for samba-vscan.

> Sophos appears to make an actually on access scanning engine for UNIX. 
> Something I've not seen from any of the other vendors.  I have not used
> it nor do I know anything about it other than what I read on the
> sophos.com website.
> 
> At the moment I just have scanning on the Client side, and I run a cron
> job to scan the linux box via uvscan that comes with McAfee Active Virus
> Defense.  It's just an on-demand scanner, but I run it on the areas
> people touch every 3 hours or so.  I know that's not good enough but
I'm
> guessing it's better than nothing.
> 
> Chris Tooley
> 
> On Thu, 2001-12-06 at 10:22, Kevin wrote:
> > That's pretty much the question.  I've got Symantec
> > NAVCE running on my NT server protecting itself, the
> > Windows clients and the Exchange server, but what do i
> > do about my Linux based Samba server?
> > 
> > Will a linux based AV app search for Win32 based
> > viruses?
> > 
> > Thanks,
> > VeKTeReX
> > 
> > -- 
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
> 
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
> 
> 
>