Re: Scanning Linux Drives for MS Viruses - How to?

["Russell W. Behne" <russ behne stafford va us>]

Yesterday, Hugh Evans thusly expounded:
> I'm using RH Linux 5.2 and am serving files to 40+ NT users (Word, Excel,
> etc.) How do I scan my Linux Server for MS related viruses. I have tried
> scanning shares etc. from the NT boxes using Norton AntiVirus but I just
> crash the client. The only thing that seems to work is to copy folders to
> the client - scan locally and then put the folders back on the server....
> 
> Any advice would be apprecited

Another thing to consider is those email viruses. I use a procmail recipe
in my /etc/procmailrc which stops many viruses like;

zipped_files.exe, prettypark.exe, pretty park.exe, path.xls, compu_ma.exe,
list.doc, photos17.exe, happy99.exe, ibmls.exe, picture.exe, yahoo.exe,
ie0199.exe, aol4free.com, monopoly.vbs, toadie.exe, setup.exe, suppl.doc,
y2kcount.exe, and story.doc.

Whenever it catches a problem it disables it and ads a header similar to
this one to the incomming email:

  X-Security: MIME headers sanitized on behne.stafford.va.us
        See http://www.wolfenet.com/~jhardin/procmail-security.html
        for details. $Revision: 1.88 $Date: 1999-08-28 13:17:29-07

It stops:
Browser attacks, Buffer Overflow attacks, Trojan Horse attacks and Shell
Script attacks that are propagated through the email. For more info have a
look at:

	http://www.wolfenet.com/~jhardin/procmail-security.html

Enjoy,
Russ.
--
                Ne Desit Virtus - The Behne Family Motto

Never stand on the street corner arguing with a fool; passers by can't
tell which one the fool is.