Forum Moderators: bakedjake

Message Too Old, No Replies

Anti-Virus on Linux Server

         

topr8

7:05 pm on Oct 19, 2020 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



... just wondering if it is standard practice to have anti-virus software running on a linux webserver?

if so, any ideas about what to use?

this server is just a webserver, serving, webpages, images and video ... users can only enter text into forms and upload images.

thanks.

robzilla

8:15 pm on Oct 19, 2020 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Not standard practice on web servers as far as I'm aware. I've never considered it, and I don't really see the point. At least not for the web server itself, it could be useful if you're passing on files to clients or other servers.

topr8

8:25 pm on Oct 19, 2020 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



ok thanks, i thought that.

i'm just upgrading my server - very happy with the host in general - but they adding on anti virus in their new quote ... i thought they were trying it on a bit, as i have never had it in the last 20 years of servers, but wanted to check ... thanks for your input! much appreciated robzilla!

robzilla

8:44 am on Oct 20, 2020 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Might be interesting to hear their motivation for putting it on the quote, but most likely they're just up-selling and aiming for a commission. Which is silly, really, because it's not good for the server's performance as a web server. Unfortunately, just the word "anti-virus" is sometimes enough to scare people into buying it, just to be "on the safe side". If you'd need it and you self-manage, there are free alternatives like ClamAV that should do the trick. Or plug into the VirusTotal API (also free).

graeme_p

8:51 am on Oct 20, 2020 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Its useful on a mail server, but it should not cost you a lot to add it even if you need it.

engine

9:01 am on Oct 20, 2020 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



One host I use scans for malware for free. The reason, they say, is to catch files uploaded in error, or deliberately, thereby protecting their system.

dstiles

10:38 am on Oct 20, 2020 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



I agree with graeme_p - for a mail server, yes, to check for incoming viruses in the mail. Having said that, either by judicious source blocking or what I don't know, I get almost no viruses reported from clamav, and those are usually badly written genuine emails from banks etc. I sometimes wonder if the extra processing load is worth it.

I don't have AV on my desktop linux machines, either, relying on good practices instead.

topr8

8:19 pm on Oct 21, 2020 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



sorry been away for a couple of days ...

@robzilla
Might be interesting to hear their motivation for putting it on the quote


yes i'm sure it is upselling, it is only GBP5 a month, but it adds up over the months/years ... i'm not going to name the host as actually they have been extremely good over the last several years since i moved from Rackspace. i suspect partly my (linux distro) server is entering end of support for that version and i told them i don't want to pay any more for my new server as to what i'm already paying. their quote for a new sever is more than i paid before, however i wonder if items like anti virus were just added to the quote so i could say, no way i don't want that, thereby reducing it by a little and making me feel good that i've chipped away at the price!
however i've been selling snow to eskimoes for more than 30 years, so i know a game or two!

@engine
files uploaded in error
yes that makes sense, in my case i do have a few clients using the server but they can only upload jpgs no other files at all, otherwise only text from forms.i think my testing for true jpg files on upload is pretty rigorous. otherwise it is only me and my team who upload to my sites and i'm incredibly strict.

@graeme_p @dstiles
Its useful on a mail server
I agree with graeme_p - for a mail server, yes, to check for incoming viruses in the mail


thanks guys, noted ... i'm also a ruthless blocker at the firewall, so have had little issue with viruses in email ... i will use clam antivirus as suggested on the server as suggested though.

graeme_p

12:32 pm on Oct 22, 2020 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



it is only GBP5 a month, but it adds up over the months/years


The financial economist in me (from my former career) cannot help jumping in here:

&5 a month is £60 an year. With a 5% discount rate and assuming you pay if forever (it keeps the calculation simple and is only a bit higher than assuming a large but finite number of years) and annually (slightly lowers, but simplifies) and the annual cost never changes (you wish!), then, with a 10% discount rate that has a net present value of £600, with 5% £1,200.

topr8

10:46 pm on Oct 25, 2020 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



thanks graeme_p although i'm not that sure what you mean! ... as i don't have an accountancy background!

JorgeV

10:49 pm on Oct 25, 2020 (gmt 0)

WebmasterWorld Senior Member 5+ Year Member Top Contributors Of The Month



You can run once in a while chkrootkit and rkhunter .