[ILUG] antivirus info

[Andrew Kemmy]

Hi,

There is a useful summary of AV software for Linux at :

http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/openantivirus/
mini-faq/av-unix_e.txt?rev=HEAD&content-type=text/vnd.viewcvs-markup

 From it I noticed that Trend produce a free product :

ftp.antivirus.com/products/freetools/filescanlinux.tar

It's free to download and use but they don't provide tech support.
(Disclamer : I don't have any association with Trend apart from using their 
products.)


Install + Config:

The install script has to be "persuaded" to run on anything other than RedHat
6.x by adding "release 6" somewhere in /etc/issue. Also for non-RH distros
(I am using SuSE 7.2 here) the /etc/rc.d/init.d and /etc/sysconfig directories
need to be created during install, and /etc/sysconfig/network file created.
Once that is done, the script attempts to start 
/opt/trend/ISADMIN/bin/iscanhttpd -f /opt/trend/ISADMIN/config/httpd.conf,
and one may then point  a browser at http://localhost:1812/interscan to 
configure the virusscaner. 

Use:

It  works (eventually). Browser-based manual or auto-scans. Simple to use.
Scanning is file-based, e.g. no on-demand or "realtime" scanning. It would be
useful for someone who has to recieve and forward dodgy win32 binaries ie
Word Docs etc.
One annoyance was that updating the virus definitions seemed to produce a 
"your system is up to date" without downloading anything - which casts a 
shadow of suspicion for me - I need to investigate further here.

Conclusion:

It's free. It's web-based config is based on apache httpd. Remember to change 
the default password for accessing the config console. Some folks might find 
it useful ?

Regs,

Andrew.