Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

is it possible to kit out a lot of Ubuntu machines with antivirus protection, then have them point to a central update/administration server?

share|improve this question

You'll want to investigate ClamAV. I don't know if it's centrally manageable but I'm sure you can at least use a centralized update server.

Note that ClamAV mostly detects Windows viruses. It's primarily intended for use in mail/file servers for Windows clients. There are almost no Linux viruses and the ones that do exist are not a significant enough threat to warrent any attention.

share|improve this answer

ClamAV updated over SMB or NFS.

IIRC It can update from a central server.

I don't know why you would need AV for Linux, you'd be better off with a decent hardware firewall.

share|improve this answer
Some company policies require the ability to scan for viruses on systems that serve content to Windows clients in some fashion (SMB,HTTP,FTP,etc) – jtimberman Aug 21 '09 at 13:58

ClamAV is the de facto standard antivirus program for Linux.

For updates, if you're using Ubuntu and Debian, ClamAV updates are distributed just like any other package updates (see here or here), so apt-get will take care of downloading and installing them for you. If you really want to control updates yourself, you can set up your own repository using any of the howtos online (such as this one).

For other aspects of centralized administration and reporting, you'll want to look into general Linux administration tools (like Puppet or Cfengine) and loggers like syslog-ng or rsyslog. All of these can be configured to handle ClamAV as well as everything else on your boxes. But that's becoming more of a Serverfault question.

There are commercial products available - McAfee, for example, offers LinuxShield - but I doubt they offer much over ClamAV.

share|improve this answer

Yes, as many people have pointed out, ClamAV is the de-facto standard... mainly because its free. However, its never done that well in the anti-virus tests.

With the growing popularity of Linux, there are Linux AV products available for purchase from the established players. McAfee LinuxShield (thanks Josh), Trend Micro's ServerProtect, Sophos Anti-Virus for Linux, and others

There are also free versions, Avast does a free one for home usage (and it received 100% success rate in the Feb 09 Anti Virus Bulletin tests)

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.