[ Home ]

as it looks like i will be setting up protection on the linux boxes that are serving in here, and i know i could use google but it would be good to know what grix thinks

There isn't any cause to be a useful a virus needs to have root user status so what you want to do is make sure you have a decent firewall and that your server have no exploits available for them - keep them patched and up to date. If no-one (or rather no program) can gain root status you are fine - 905 of viruses are visual basic viruses that run ONLY in Microsoft Outlook - if they have had a virus problem the simplest and cheapest way to prevent it EVER happening again is move all users from Outlook to Mozilla/Netscape mail or Eudora. The virus problem is really The Outlook problem. Intrusion detection software like Snort is useful for linux as is chkrootkit which will let you know if you have been rooted and your box is no '0wn3d' by some script kiddie.

I concur again

I just turn it off and call IT

I am it scary shit - thanks for that grix, i know its outlook express causing the fecking problems, but just want to make sure that the linux servers are completely clean, you should see the kit i have to play with now adays, its all very scary at times all seat of your pants stuff but i seem to know what i am doing.. thats a bad thing and cheers for your advice mex.. glad you agree