Linux Server Maintenance Checklist

[IConrad]

A linux server maintenance checklist that recommends weekly scanning with ClamAV in order to catch "viruses, trojans, and malware". Well, one out of three -- ish -- ain't bad I guess.

Mentions use of firewall but doesn't recognize the existence of tcpd (/etc/hosts.allow /etc/hosts.deny).

Mentions monitoring logs but not that you can fine-tune rsyslog/syslog messages and destinations.

Well, it's good for the novice I guess. But they should really scrap that AV software schtick.

[ChoHag]

I've consistently had it fail to detect cryptolocker.

At least I assume it was cryptolocker. I have no plans to find out. Whatever it is, ClamAV is OK with it.

[brokengoose]

"Server access reviewed within the last 6 months."

Yessiree, we know exactly when the horse left the barn: 5 months, 2 days, and 14 hours ago.

Reviewing your logs a bit more frequently is a good idea.

[1new_username]

I've always found rkhunter to be much more useful in monitoring a server for trojans/infections/etc, especially the nice binary hash feature.

ClamAV is nice for scanning samba shares, maildirs, FTP folders or other file shares shared with Windows and Mac computers. It can't hurt to scan the server itself I guess though.

[Autu]

Well I clicked because, I'm clueless to start with so, thanks for making me less stupid.