Firewalls and virus scaners?

[Victor Mendonça]

I've never ran a virus scan on any of my machines. And the fact that we re-install our OS twice a year (with the releases of Ubuntu) only makes it even harder for malicious softwares and attacks compared to Windows machines.

Courtenay, in my opinion you should try to "invest" your efforts in security measurements other than what a Windows user would be used to. Things that were mentioned here (like ssh port) are very important. For example, my server only allow ssh connection from the Internet for one specific user which has very limited access (CHROOT). My other user's however can login from LAN (except root).

You can try to apply the same rules to other services (like samba, ftp) with hosts.allow and hosts.deny.

Strong passwords are another important thing. There are tools that you can use to test your passwords (like John the ripper, http://www.openwall.com/john/).

One of the main problems as well are rootkits. Here another two tools that you can use to help identify them:

=> Chkrootkit - http://www.chkrootkit.org/
=> Rootkithunter - http://www.rootkit.nl/

And if this is for a server, a good firewall and system changes monitoring utility is always a good thing to have:

=> R-fx Networks - http://www.rfxn.com/projects/

 

Victor Mendonça
http://wazem.org/





________________________________
From: Randall Ross <randall at executiv.es>
To: ubuntu-ca at lists.ubuntu.com
Sent: Tuesday, May 26, 2009 1:30:41 AM
Subject: Re: Firewalls and virus scaners?

 To those
reporting that they have had viruses on Ubuntu, please specify the
virus(es) you had (by name, or by the results output from your virus
scanners).

Thanks,
Randall.



      __________________________________________________________________
Make your browsing faster, safer, and easier with the new Internet Explorer® 8. Optimized for Yahoo! Get it Now for Free! at http://downloads.yahoo.com/ca/internetexplorer/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-ca/attachments/20090526/27610595/attachment.html>