[ale] Linux antivirus scanners

[Jim Kinney]

+1

Better process is to have a scanner on each desktop but ALL files are
stored on central server. That makes each desktop a readily replaceable
thing and centralizes the AV scan on the bulk of the files. Part 2 is run
that fileserver as a samba server and use squid proxy and ClamAV to scan
all data entering via WAN as well as email. That narrows your entrance
vector to USB and optical disk infection. So unplug data cable on optical
drives and disable all USB ports except for keyboard and mouse and bolt a
shield around those plugs so they can't readily be removed.

Best route is to use Linux boxes at the desktop running a KVM instance of
Win7 with only keyboard and mouse on USB. If ANYTHING happens, toss the
image and restore from backup and restart. will take about 5 minutes.


On Tue, May 21, 2013 at 11:02 AM, Jeff Hubbs <jhubbslist at att.net> wrote:

> On 5/21/13 10:47 AM, Alex Carver wrote:
>
>> a central machine that mounts and scans the file systems of other
>> machines with a mix of OSes (Windows being one).
>>
> That's going to mean reading out their entire filesystem over the network,
> right?  Do you really want to do that?
>
> ______________________________**_________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/**listinfo/ale<http://mail.ale.org/mailman/listinfo/ale>
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/**listinfo<http://mail.ale.org/mailman/listinfo>
>



-- 
-- 
James P. Kinney III
*
*Every time you stop a school, you will have to build a jail. What you gain
at one end you lose at the other. It's like feeding a dog on his own tail.
It won't fatten the dog.
- Speech 11/23/1900 Mark Twain
*
http://electjimkinney.org
http://heretothereideas.blogspot.com/
*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.ale.org/pipermail/ale/attachments/20130521/1b7e6a18/attachment.html>