[Samba] Anyone using antivirus software?

Michael Cunningham
Thu, 13 Jun 2002 11:08:55 -0000

>Hello list,
>           I was just wondering if anyone is using anti-virus software on
>their Samba server. I have protection on my clients, but I want to run
>software on the server too. I've looked at McAfee's Virus Scan, but
as
>far as I can tell, it only uses "on-demand" scanning, meaning I
have to
>trigger it from the command line, or run a cron job. I would like to have
>something that is real-time, and detects an infected immediately, without
>my interaction. This is how the McAfee AV software works on the client
>PC's running Windows. Anyone know of a similar product?

Brian,

I don't think you are going to find anything to do it in real time. I have
looked into this in the past and found only schedule based products
like mcafee. The Mcafee product works okay.. it can be a real resource
hog however when it is running. Make sure you schedule it for late at night.

For a Unix AV product to scan in real time, it would need to have hooks into
the kernel to catch all file writes/reads/open/closes. There aren't any
products
that I am aware of that can do that.

Mike