It's worthwhile to run a scan at regular intervals. While most would argue you aren't very likely to get a virus on a completely patched Fedora system, it still won't hurt anything. Make sure you have the clamav-update package installed so you can run freshclam and update your virus definitions as well. chkrootkit is another good program that will check for rootkits, aide for intrusion detection, make sure selinux is enabled, if you don't like the default fedora firewall firestarter is in extras, but either way have a firewall, run yum often, and so on and so forth. ----- Original Message ----- From: "Dan Thurman" <dant(a)cdkkt.com&gt; To: "For testers of Fedora Core development releases" <fedora-test-list(a)redhat.com&gt; Sent: Saturday, April 01, 2006 12:57 AM Subject: [FC5] ClamAV - Anyone using this?

On Fri, 2006-03-31 at 11:08 -0600, Jason L Tibbitts III wrote: Thanks to all who responded... So far, no one has said anything about the missing file(s) that I am looking for, i.e. the /etc/clamav.conf or /etc/clamd.conf... Anyone have any idea what is going on? Do I have to create this file manually? Kind regards, Dan

do 'man clamd.conf' to see options and values; the majority if not all have defaults so creating the file empty should get it running without complaining. There is no man page for /etc/clamav.conf on FC5, though I found one online that reads identical to the man page for clamd.conf on Fedora; this file may be for an older version of clamav, or an alternate name for the same configuration file, etc. Jason ----- Original Message ----- From: "Dan Thurman" <dant(a)cdkkt.com&gt; To: "Jason L Tibbitts III" <tibbs(a)math.uh.edu&gt; Cc: "For testers of Fedora Core development releases" <fedora-test-list(a)redhat.com&gt; Sent: Saturday, April 01, 2006 2:42 AM Subject: Re: [FC5] ClamAV - Anyone using this?

On Friday, March 31, 2006 7:57 AM -0800 Dan Thurman <dant(a)cdkkt.com&gt; wrote: I haven't yet used it with FC5, but I use it on several FC2 systems in combination with MIMEDefang and sendmail to scan email passing through my gateways. I don't recall any special problems rebuilding it on FC2, but I did have to create a MIMEDefang-specific config file and initscript to run a clamd dedicated to MIMEDefang's use. Ideally those should be included as subpackages, one per potential client. I believe the doc directory includes an explanation of how to set this up.

On Fri, 2006-31-03 at 07:57 -0800, Dan Thurman wrote: ...snip... Good question. A couple days ago, I discovered I had a couple files with viruses after I mapped some samba shares on a windows machine. I notice some "strange" disk and network activity and when I ran top, smbd was fairly active. I toggled my KVM over to the windows machine and MacAfee was scanning the mapped drives. I did not think it would scan mapped drives, but was interested to see what it would find. The next morning it had finished scanning the 800GB of shares and found two files, one jpeg and one zip file. They were both from some stuff I had downloaded a years ago for my Windows box, and was archiving it on the Linux box. I suppose that is not too bad having two files out of 800GB with some dating back to the mid 80's. :^0 You could probably guess that I am a pack rat. :^P Back On Track - It would appear that if you share files with any windows machines, which is likely, it would be prudent to have antivirus software that runs natively on the Linux machine to ensure that infected files are not propagated to machines they can infect.