Friday, July 31, 2009

While running Linux from disc do I need to download and install firewall and antivirus?

I am new to the Linux community and have just recently started checking out Ubuntu. Do I need to install a seperate firewall and av on the disc to be safe ?

While running Linux from disc do I need to download and install firewall and antivirus?
Well, there have been a great many answers, some good and some bad. I like the answer where someone said "you don't need an antivirus and you might need a firewall", but that's not the whole story, either.





As with any computer running any OS (Operating System), you really need to be careful about what you download or run from the Internet. This is not just limited to executables, either; websites with Flash content or Javascript are also dangerous depending on the nature of the site. So, yes, you don't need an antivirus program in Linux if you're responsible about what you download / run. To the person that said that viruses "don't exist in Linux", you're completely wrong; viruses exist in all OS's, but they are MORE of a problem on Windows-based PCs. If you're looking to use Linux for an extended period of time, then I would either install an AV program or I would be especially careful about what I do on this PC to avoid AV problems.





Really, the firewall is much, MUCH more important than the AV, but the question should be "why" you need a firewall, not if. Ubuntu is good about not starting up with too many unnecessary or vulnerable services running; other Linux OS's like Gentoo start with sshd (Secure Shell service), for instance, that could be vulnerable. So, check and see what services are running and disable any that you don't need. Then, to increase the security on your ports with stateful packet filtering, you would have a couple options.





There are a number of firewall products for Linux, one of which was Firestarter, if I remember right. It has a graphical interface, so it's pleasant to the average user, and should be sufficient for your needs. If you're looking to delve deeper into Linux and learn how powerful command line can be, then you'll want to read up on iptables; I configure our Linux firewalls at work with iptables and it has a great number of options. Since it does have a reasonable learning curve, though, I'd give Firestarter a try.





Really, the only question you should ask yourself when wondering how secure your PC needs to be is "what kind of communication will occur to / from my system, and do I need any of those?". It takes a lot of reading and understanding about an OS to do security the right way... for the average person, a decent graphical firewall and some common sense should suffice, though.
Reply:you really shoud have that before you even come online yes download them
Reply:No.


Firewalling may become an issue if you run the live cd for any extended time, but virii are typically of very little consequence to Linux in general, and less to LiveCD's. [Depending on how you use it, little or no consequence.]





Comment back and post how you plan to use the livecd- short jaunts or long term 24/7 use, etc.
Reply:I would say it is not necessary at all if you are running from a Live CD as the local file systems are mounted read only by default. Moreover, there is a default firewall, iptables, on most Linux systems that comes along. So, both AV and Firewall are unnecessary.
Reply:NOT necessary, unless you make a hard drive partition for DLs.





There is no virus in GNU/Linux, and the Anti-Virus programs in MAC OS, BSD, and Linux are there to protect Microsoft users on a network!





I find virus, download them, look at them, but, delete them, but, I can see where a windoze unit could possibly get it on the network.





I only have one XP Pro box on this network, of 12 Linux and 5 Macs systems. more in the wings... but, it dims the lights to turn on too many...





You should really try out http://pclinuxos.com which is a LiveCD. I consider it superior, but, YMMV.
Reply:My answer is a conditional yes.





Even if the Linux is booted temporarily, a connection to the internet which is open is an invitation to corruption. If you use a Linux browser, you can still pickup viruses and trojans and you can still affect your disk or your local network by exposing it to the internet.





As an analogy, I would ask you if there is ever a time that you will leave your front door of the house wide open and unlocked in a questionable neighborhood? You may say no, except when I am entering and leaving and when I am moving something into the house...then I will prop the door open and leave it while I move in and out. ....OK, but would you walk away from the door and leave it unattended in that case? What if you used the bathroom or were moving into the basement? Ahhh, in that case someone could sneak in and out without your knowledge...and likely would given that the door is open.





Such is the nature of the internet. For me, I opt to keep my doors locked and secured and have someone inspect the security periodically. "Your mileage may vary"

stalk

No comments:

Post a Comment