[opensuse] Anti-virus in Linux (openSUSE 11.1), is it required ?
I use openSUSE 11.1 Linux (dual-boot with Win XP Prof.) for general home use (browse Internet, documents, occasional music/video view, etc). For this type of use, are either/both of these required: I have an always-on cable Internet connection (broadband). 1) A Firewall (default App Armour is enabled) 2) Anti-virus (opSUSE 11.1 has clam antivirus) Should one leave them on & update as necessary or is it safe to browse without them enabled ? Jay == -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Jay Mistry wrote:
I use openSUSE 11.1 Linux (dual-boot with Win XP Prof.) for general home use (browse Internet, documents, occasional music/video view, etc). For this type of use, are either/both of these required: I have an always-on cable Internet connection (broadband).
1) A Firewall (default App Armour is enabled)
2) Anti-virus (opSUSE 11.1 has clam antivirus)
Should one leave them on & update as necessary or is it safe to browse without them enabled ?
Exploits exist for all browsers, so if you are using your machine to surf the internet it is recommended to have a virus scanner installed and the firewall active. The same goes for documents like pdf files. -- Sandy List replies only please! Please address PMs to: news-reply2 (@) japantest (.) homelinux (.) com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Sandy Drobic said the following on 01/27/2009 06:52 AM:
Jay Mistry wrote:
I use openSUSE 11.1 Linux (dual-boot with Win XP Prof.) for general home use (browse Internet, documents, occasional music/video view, etc). For this type of use, are either/both of these required: I have an always-on cable Internet connection (broadband).
1) A Firewall (default App Armour is enabled)
2) Anti-virus (opSUSE 11.1 has clam antivirus)
Should one leave them on & update as necessary or is it safe to browse without them enabled ?
Exploits exist for all browsers, so if you are using your machine to surf the internet it is recommended to have a virus scanner installed and the firewall active.
Does ClamAV scan the HTTP stream? I thought it was an e-mail scanner.
The same goes for documents like pdf files.
Are you talking about scanning the file system rather than incoming data steam? If you are viewing PDFs at remote sites via an embedded tool in your browser then you need either a stream scanner or something built into the browser. Does ClamAV do this? I was under the impression it didn't. -- There are three simple rules for making a smooth landing. Unfortunately, no pilot knows what they are. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Tue, Jan 27, 2009 at 11:44, Jay Mistry <jaylinux53@gmail.com> wrote:
I use openSUSE 11.1 Linux (dual-boot with Win XP Prof.) for general home use (browse Internet, documents, occasional music/video view, etc). For this type of use, are either/both of these required: I have an always-on cable Internet connection (broadband).
1) A Firewall (default App Armour is enabled)
2) Anti-virus (opSUSE 11.1 has clam antivirus)
Should one leave them on & update as necessary or is it safe to browse without them enabled ? Linux is affected by very few viruses so it will generally be fine. If you download files in Lunix and access them in WinXP, that may problematic if the file was infected and clamav did not catch it. So I would run a firewall and antivirus, if files were going to be shared between the OpSys, on _both_ OpSys.
HTH ne... -- Registered Linux User # 125653 (http://counter.li.org) Now accepting personal mail for GMail invites. Bill Cosby - "A word to the wise ain't necessary - it's the stupid ones that need the advice." -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tuesday, 2009-01-27 at 17:14 +0530, Jay Mistry wrote:
1) A Firewall (default App Armour is enabled)
apparmour is not a firewall.
2) Anti-virus (opSUSE 11.1 has clam antivirus)
Should one leave them on & update as necessary or is it safe to browse without them enabled ?
Yes, you should have both. But contrary to windows antivirus, the linux kind will not scan anything you do/download with the browser. You have to do that manually, AFAIK. - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (GNU/Linux) iEYEARECAAYFAkl++RAACgkQtTMYHG2NR9VDqgCeLGfv4Z60rTTKRdFi3ZBRqsj8 R+QAmwchD+F9bOECazHNcwXZkUkkBu+J =GFNj -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
1) A Firewall (default App Armour is enabled)
apparmour is not a firewall.
Sorry for the error, am new to Linux (just been using it for past about 3 mo); first priority was to get a working system & this took up most of the time since Linux is so much different from Windows. As I had read that Linux viruses are rare /almost non-existent, had not bothered much with the security aspect of the OS.
Agreed. Almost all routers have a firewall built-in so it's kinda pointless to have a firewall running on a desktop behind one. On a laptop, that's a different story. I always disable the firewall on my desktops.
This is a single-user home desktop PC, for basic computing tasks. I connect to the Internet through a cable connection via a wireless router. Will this work as a firewall ? Jay == -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Jay Mistry wrote:
This is a single-user home desktop PC, for basic computing tasks. I connect to the Internet through a cable connection via a wireless router. Will this work as a firewall ?
Yes. -- Use OpenOffice.org <http://www.openoffice.org> -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On 2009-01-27T17:14:13, Jay Mistry <jaylinux53@gmail.com> wrote:
I use openSUSE 11.1 Linux (dual-boot with Win XP Prof.) for general home use (browse Internet, documents, occasional music/video view, etc). For this type of use, are either/both of these required: I have an always-on cable Internet connection (broadband).
1) A Firewall (default App Armour is enabled)
2) Anti-virus (opSUSE 11.1 has clam antivirus)
Should one leave them on & update as necessary or is it safe to browse without them enabled ?
The threat model on Linux seems to subtly differ from Windows; user files cannot infect the binaries installed. Not to mention a rather distinct lack of Linux viruses in the wild. So AppArmor as an additional security model (it's not a firewall) and enabling the firewall (which ships enabled by default, I think) should be plenty safe. (I personally don't even bother with AppArmor.) Oh, and backups of course. If you want to be really paranoid, add an additional user just for web surfing, which then can't reach the files/mail of your other account. Regards, Lars -- Teamlead Kernel, SuSE Labs, Research and Development SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nürnberg) "Experience is the name everyone gives to their mistakes." -- Oscar Wilde -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Jay Mistry wrote:
I use openSUSE 11.1 Linux (dual-boot with Win XP Prof.) for general home use (browse Internet, documents, occasional music/video view, etc). For this type of use, are either/both of these required: I have an always-on cable Internet connection (broadband).
1) A Firewall (default App Armour is enabled)
2) Anti-virus (opSUSE 11.1 has clam antivirus)
Should one leave them on & update as necessary or is it safe to browse without them enabled ?
Jay ==
I have a separate firewall, so I don't enable it on my other computers. The main purpose for AV on Linux is when it's used a server for Windows boxes. Viruses are not an issue for Linux. -- Use OpenOffice.org <http://www.openoffice.org> -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Tue, Jan 27, 2009 at 12:38 PM, James Knott <james.knott@rogers.com> wrote:
I have a separate firewall, so I don't enable it on my other computers. The main purpose for AV on Linux is when it's used a server for Windows boxes. Viruses are not an issue for Linux.
Agreed. Almost all routers have a firewall built-in so it's kinda pointless to have a firewall running on a desktop behind one. On a laptop, that's a different story. I always disable the firewall on my desktops. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Tue, Jan 27, 2009 at 3:10 PM, Larry Stotler <larrystotler@gmail.com> wrote:
On Tue, Jan 27, 2009 at 12:38 PM, James Knott <james.knott@rogers.com> wrote:
I have a separate firewall, so I don't enable it on my other computers. The main purpose for AV on Linux is when it's used a server for Windows boxes. Viruses are not an issue for Linux.
Agreed. Almost all routers have a firewall built-in so it's kinda pointless to have a firewall running on a desktop behind one. On a laptop, that's a different story. I always disable the firewall on my desktops.
There's a small chance if there's an infected windows machine on the network (or even let a friend with an infected machine to join your wifi) that exposes your desktop to a risk. Again - small chance, but ... Cheers -- Svetoslav Milenov (Sunny) Even the most advanced equipment in the hands of the ignorant is just a pile of scrap. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Tue, Jan 27, 2009 at 4:22 PM, Sunny <sloncho@gmail.com> wrote:
There's a small chance if there's an infected windows machine on the network (or even let a friend with an infected machine to join your wifi) that exposes your desktop to a risk. Again - small chance, but
No chance of there here(no WinDoZe on my network unless I'm working on someone's...). :-) -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Sunny wrote:
On Tue, Jan 27, 2009 at 3:10 PM, Larry Stotler <larrystotler@gmail.com> wrote:
On Tue, Jan 27, 2009 at 12:38 PM, James Knott <james.knott@rogers.com> wrote:
I have a separate firewall, so I don't enable it on my other computers. The main purpose for AV on Linux is when it's used a server for Windows boxes. Viruses are not an issue for Linux.
Agreed. Almost all routers have a firewall built-in so it's kinda pointless to have a firewall running on a desktop behind one. On a laptop, that's a different story. I always disable the firewall on my desktops.
There's a small chance if there's an infected windows machine on the network (or even let a friend with an infected machine to join your wifi) that exposes your desktop to a risk. Again - small chance, but
Given there are no Windows machines, infected or otherwise, that's not an issue here. -- Use OpenOffice.org <http://www.openoffice.org> -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 James Knott wrote:
Sunny wrote:
On Tue, Jan 27, 2009 at 3:10 PM, Larry Stotler <larrystotler@gmail.com> wrote:
On Tue, Jan 27, 2009 at 12:38 PM, James Knott <james.knott@rogers.com> wrote:
I have a separate firewall, so I don't enable it on my other computers. The main purpose for AV on Linux is when it's used a server for Windows boxes. Viruses are not an issue for Linux.
Agreed. Almost all routers have a firewall built-in so it's kinda pointless to have a firewall running on a desktop behind one. On a laptop, that's a different story. I always disable the firewall on my desktops.
There's a small chance if there's an infected windows machine on the network (or even let a friend with an infected machine to join your wifi) that exposes your desktop to a risk. Again - small chance, but
Given there are no Windows machines, infected or otherwise, that's not an issue here.
This is not really just a Windows related issue, a "gateway" firewall is probably adequate against external threats in most home or small commercial environment where incoming external access is not the norm but in a more complex environment the possibility of an internal threat is always there, and the external firewall could be circumvented by unintended or intended internal collaboration (e.g. a compromised web server). So some machines may need some additional protection against such possibilities (either by zoning or other methods). The more complex an environment becomes the more likely a security breach is to occur, so ones security structure should ideally adapt to infrastructure and service changes. - -- ============================================================================== I have always wished that my computer would be as easy to use as my telephone. My wish has come true. I no longer know how to use my telephone. Bjarne Stroustrup ============================================================================== -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org iEYEARECAAYFAkmAOEIACgkQasN0sSnLmgJkbQCgtBQNDz/y1NWvxBqPhlFxeoWo Bu8An1yo8MdWfkq2R0NyKqo7NfKeeGD1 =9Y2r -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Larry Stotler wrote:
On Tue, Jan 27, 2009 at 12:38 PM, James Knott <james.knott@rogers.com> wrote:
I have a separate firewall, so I don't enable it on my other computers. The main purpose for AV on Linux is when it's used a server for Windows boxes. Viruses are not an issue for Linux.
Agreed. Almost all routers have a firewall built-in so it's kinda pointless to have a firewall running on a desktop behind one. On a laptop, that's a different story. I always disable the firewall on my desktops.
My firewall is an old computer, running OpenSUSE 11.0. -- Use OpenOffice.org <http://www.openoffice.org> -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Tue, January 27, 2009 12:44, Jay Mistry wrote:
I use openSUSE 11.1 Linux (dual-boot with Win XP Prof.) for general home use (browse Internet, documents, occasional music/video view, etc). For this type of use, are either/both of these required: I have an always-on cable Internet connection (broadband).
1) A Firewall (default App Armour is enabled)
2) Anti-virus (opSUSE 11.1 has clam antivirus)
Should one leave them on & update as necessary or is it safe to browse without them enabled ?
A firewall is always a good idea. There is no use for antivirus on Linux, but in your case you will probably have a partition that is shared by Linux and Windows. Antivirus on Linux for the files on that partition is a good idea. -- Amedee -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
participants (11)
-
Amedee Van Gasse -
Anton Aylward -
Carlos E. R. -
G T Smith -
James Knott -
Jay Mistry -
Larry Stotler -
Lars Marowsky-Bree -
ne... -
Sandy Drobic -
Sunny