How to scan virus or botnet to Centos Server?

July 3, 2011 at 22:36:26
Specs: Centos OS 5.5
Hi, i am totally new to CentOS/linux, I have a CentOS 5.5 server and i installed a web accelerator product on it. The CentOS is fully command base due to I install it according to the requirement specify by the web accelerator product.

Currently my office facing IP address blocks by a particular reputation website, http://www.barracudacentral.org. The reasons are:
* Your PC may be infected with a virus or botnet software program.
* Someone in your organization may have an infected PC with a virus or botnet program.

So i planing to scan the Server but i have no idea how to scan it, is it anbody can help me? If i post in the wrong place, please forgive me and direct me where should i post.

Thanks.

below are the setting i hv done during installation of CentOS:
Additional Tasks Configuration page
- Uncheck Desktop – Gnome

Software Customization page
- Mouse-Click on Servers, check DNS Name Server
- Mouse-Click on Base System >> System Tools >> Optional packages
Check sysstat – 7.0.2-1.el5.i386, Mouse-Click on Close

- Disable avahi-daemon by uncheck the box
- Disable bluetooth by uncheck the box
- Disable cups by uncheck the box
- Disable ntpd by uncheck the box
- Disable sendmail by uncheck the box
- Disable yum-updatesd by uncheck the box


See More: How to scan virus or botnet to Centos Server?

Report •

#1
July 4, 2011 at 10:35:34
Boot to a live cd and see if that site still blocks you. They may be doing it on IP address. Do you have a static IP?

1/3 of highway deaths are caused by drunks. The rest are by people who can't drive any better than a drunk.


Report •

#2
July 4, 2011 at 18:23:47
Hi Jefro,
May i know what do you mean by Boot to a live cd ?

Currently the email we send to our partner was blocked because they use barracudacentral.org as their security.

My office IP address is dynamic and i found that yesterday our ISP set a new ip address for us and this ip address was pass in barracudacentral.org. At night, i restart the modem and the ip address was changed, so i run the reputation test in barracuda website and it directly show this ip address is listed as poor reputation.


Report •
Related Solutions


Ask Question