Firewall / antivirus for Fedora 9

[anika.ella]

I think in short time a lot of "good" people will focus their attention to Linux distributions, in distructive purposes, as they are more and more used in the world. Can you indicate me a good firewall and a good antivirus for fedora 9 ?
Thank you !

[Keldorn]

You already have firewall in fc9, but i dont know how good it is. And about antivirus, as I know it is useless in most cases on Linux.

[JohnVV]

fedora uses iptables and is installed and on by default . as to av you can install clam av , it is an on demand or daemon

yum install clamav

and READ there page
http://www.clamav.net/

[tho.mei]

Hallo

fedora does all ready include a very powerful fire wall. By default it is active. And belive my it is more powerful the the build in Window$-"firewall". You won't need a additional firewall. You can manage it with the system-config-firewall tool. Open a console an enter: system-config-firewall You will find the firewall setting also somewere in the Gome or KDE menu.

A virus scanner is not installed by default, because viruses are still a rarely problem on Linux. But you can install clamav. Ii is not know as a good anti virus program, because it is made for UNIX an Linux. On Windowz it do not very well...
To install clamav:
1. open a terminal
2. su - to become root
3. yum install clamav
4. answer with y, if yum asks
To use clamav see: http://www.clamav.net/doc/latest/clamdoc.pdf

[A.Serbinski]

From the top of the clamav web page:

Clam AntiVirus is an open source (GPL) anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways. It provides a number of utilities including a flexible and scalable multi-threaded daemon, a command line scanner and advanced tool for automatic database updates. The core of the package is an anti-virus engine available in a form of shared library.

In other words, this is NOT for scanning your system for viruses, this is for filtering email and other files that will be ACCESSED BY WINDOZE.

[JohnVV]

but you can scan your sys for win. viruses
su -
freshclam
clamscan /
-- or
clamscan /home/( user name )
---------------
but i find these more useful
chkrootkit
-- and --
rkhunter

[A.Serbinski]

What's the point in finding win viruses? They won't even run.

[Keldorn]

Originally Posted by A.Serbinski

What's the point in finding win viruses? They won't even run.

The goal of finding win viruses is to protect your friends with Windows on their computers.

[w5set]

And Linux virus' don't exist.
And I'll get a shiny new quarter if I put my tooth that fell out under my pillow.

/me sticks head back in the sand.

[oblufire]

Thought I would add my two cents. I am not a smart man so two cents is all I can offer. Windows PC mac Linux even Unix. They all have the chance to get viruses.
Problems and how they arise:

Windows viruses.
Email people download stuff they are told to download without actually checking. Going to sites through links that are not real. Or the very simple one trying to win stuff for free.Windows is built for the lowest common denominator. Therefore if the monkey sees a shiny rock it takes it.
That is why viruses are so common in windows.
Mac same as above.
Unix and linux:
They are more secure. And people constantly upgrading and fixing security risks in programs makes them very very secure. Can a virus be made to affect linux and unix systems. YES. Will it ever be successful. Probably not. By default all linux systems and as Far as I have read Unix systems have great iptables to stop malicious people. And they all have root users and normal users. Unless you are stubborn and want to run as Root the chances of a virus getting in and screwing up your system is rare.

Simple advice:
Do not run as root all the time. Do not give away passwords. Do not download email content from people you do not know. Do not think that the adds that want to give you something for free are truly free. Be paranoid yes. Be safe yes. Run as a normal user yes. constantly update and upgrade yes. New fixes are important. Do not be a monkey. Be a chimp and learn how to use the tools that are provided.

If you want another great defence just to have it try Firestarter. Great if you are running a home network.

That being said I am getting clamav just because it sounds cool.

My two cents. And this is why I love linux so much. Yes it looks like windows now and runs clean and with few problems. Easy to install most of the time. Easy to update and upgrade.

I run as my user and su to install stuff that I want.
I figure just by doing something as simple as that I am very safe. I welcome people to find the breaks and the holes in software for linux. Why because when it happens to one person they report it and then there are many people around the world who are constantly hacking linux to fix it.

I do say hacking because hacking from my understanding is a positive term meaning taking software apart to make it better. As opposed to cracking which the media tends to get confused.

My goal is to be like the gurus out there and be a hacker to make this system the best in the world.

My two cents.

[anika.ella]

OK. Thank you for all your advices.
One supplementary question - I isntalled clamav. Does he has an interface or it is running only in command line ? I try to find where it was installed (this is one of the tricks in fedora usually !), but I couldn't launch any of the files.
Do I did a stupid thing ?

[oblufire]

aw i could not get clamav. Oh well.
here is the problem.
maybe someone can fix it.

Error: clamav-data-empty conflicts with clamav-data
Error: clamav-data conflicts with clamav-data-empty

[anika.ella]

oblufire,
do you tried
yum install clamav ?
Or when is the moment in which you receive the error message ?
I understand, anyway, that there is also klamav, for KDE interface and there is also avira and avg for linux.
Nice, isn't ?
And thinking that all thos antiviruses are for win programs, in fact...

[oblufire]

I used yum. And the errors happened after yum set everything to be updated. here is the ending where it hit that block.
I am running Gnome because well KDE i used to be into it but after i got into gnome i really liked it a lot better.
Resolving Dependencies
--> Running transaction check
---> Package clamav-milter-sysv.i386 0:0.93.3-1.fc9 set to be updated
---> Package clamav-milter-core.i386 0:0.93.3-1.fc9 set to be updated
--> Processing Dependency: fedora-usermgmt for package: clamav-milter-core
---> Package clamav-milter.i386 0:0.93.3-1.fc9 set to be updated
---> Package clamav-filesystem.i386 0:0.93.3-1.fc9 set to be updated
---> Package clamav-data-empty.i386 0:0.93.3-1.fc9 set to be updated
---> Package clamav-data.i386 0:0.93.3-1.fc9 set to be updated
---> Package clamav-server-sysv.i386 0:0.93.3-1.fc9 set to be updated
---> Package clamav-update.i386 0:0.93.3-1.fc9 set to be updated
---> Package clamav-lib.i386 0:0.93.3-1.fc9 set to be updated
---> Package clamav-milter-sendmail.i386 0:0.93.3-1.fc9 set to be updated
---> Package clamav-devel.i386 0:0.93.3-1.fc9 set to be updated
---> Package clamav-server.i386 0:0.93.3-1.fc9 set to be updated
---> Package clamav.i386 0:0.93.3-1.fc9 set to be updated
--> Running transaction check
---> Package fedora-usermgmt.noarch 0:0.10-1.fc8 set to be updated
--> Processing Dependency: fedora-usermgmt-core = 0.10-1.fc8 for package: fedora-usermgmt
--> Processing Dependency: instance(fedora-usermgmt) for package: fedora-usermgmt
--> Processing Dependency: setup(fedora-usermgmt) for package: fedora-usermgmt
--> Running transaction check
---> Package fedora-usermgmt-shadow-utils.noarch 0:0.10-1.fc8 set to be updated
---> Package fedora-usermgmt-core.noarch 0:0.10-1.fc8 set to be updated
---> Package fedora-usermgmt-default-fedora-setup.noarch 0:0.10-1.fc8 set to be updated
--> Processing Conflict: clamav-data-empty conflicts data(clamav) > empty
--> Processing Conflict: clamav-data conflicts data(clamav) < full
--> Finished Dependency Resolution
clamav-data-empty-0.93.3-1.fc9.i386 from updates has depsolving problems
--> clamav-data-empty conflicts with clamav-data
clamav-data-0.93.3-1.fc9.i386 from updates has depsolving problems
--> clamav-data conflicts with clamav-data-empty
Error: clamav-data-empty conflicts with clamav-data
Error: clamav-data conflicts with clamav-data-empty

[JohnVV]

it appears that you have a fedora 8 repo installed and turned on for your fedora 9 box
run
" yum repolist "
then yum remove ( the fedora 8 repo)

also did you make a new user called " clamav " the rpm should have if you did not