Re: So, what steps do the normal folks take to secure themselves?

[Steven Pritchard <steve@silug.org>]

On Wed, Jun 16, 2004 at 01:47:31PM -0500, Ken Keefe wrote:
> So my question is this, I run Mandrake 10.0 and have Shorewall up and
> running, blocking everything. What steps do I need to take in the linux
> world to protect myself from do-badders? I never log into root and I
> typically don't download and run/compile code from sites that are not
> well known. I also perform Mandrake Update regularly.

Sounds like you're fine then.

> In windows I am used to having my firewall up and my antivirus software
> always on the prowl and I used to run a full system sweep weekly.

Well, Shorewall is your firewall, and, while there have been a couple
of "Linux viruses", they've never spread in the wild because normal
users can't "infect" a system.  (And you said you don't run as
root...)

> Is there antivirus software for linux out there that I can or should
> (more importantly) run?

The only good reason to run AV software is to cut down on the spam.
You can't be "infected".

If you do want to cut down on the spam, amavisd-new
(http://www.ijs.si/software/amavisd/) plus clamav
(http://clamav.sf.net/) works great for me.

> To be honest, I'm not sure I would know if I had a trojan if it came
> up and bit my kernel on the proverbial ass.

You can check your system with something like chkrootkit, but I don't
necessarily recommend it.  (Again, it *always* comes up with false
positives.)

Steve
-- 
steve@silug.org           | Southern Illinois Linux Users Group
(618)398-7360             | See web site for meeting details.
Steven Pritchard          | http://www.silug.org/

-
To unsubscribe, send email to majordomo@silug.org with
"unsubscribe silug-discuss" in the body.