CLAMAV and FAIL2BAN - General discussion

Wobbly · 19. Mai 2023

I see a couple short and old threads on these topics, so this is a general set of questions.

How many OMV users are installing CLAMAV and/or FAIL2BAN?

For those that have, what has been your general experience?

Currently I have neither, but I see their availability on here. I am just not sure the utility.

I could scan the shares when they are mounted on a PC, as far as AV goes.

Given that the machine is on a pretty small network behind a router, I am not certain what utility there is to FAIL2BAN.

Hoping a few of you see this and chime in.

ryecoaaron · 19. Mai 2023

clamav might be good if you downloading things directly on the OMV box. Then it doesn't have a chance to hit your Windows boxes.

fail2ban is very common exposed to the internet. If you aren't doing that, probably don't need it.

andrzejls · 19. Mai 2023

Zitat von Wobbly

I see a couple short and old threads on these topics, so this is a general set of questions.

How many OMV users are installing CLAMAV and/or FAIL2BAN?
For those that have, what has been your general experience?

Currently I have neither, but I see their availability on here. I am just not sure the utility.
I could scan the shares when they are mounted on a PC, as far as AV goes.

Given that the machine is on a pretty small network behind a router, I am not certain what utility there is to FAIL2BAN.

Hoping a few of you see this and chime in.

Alles anzeigen

I only have Linux computers and 1 (one) my wife Windows 11 (reason for clamAV). All of them, including OMV 6 NAS computer, are behind pfSense firewall where I did install clamAV. Do not see any reason for installing additional clamAV on OMV NAS, it is behind router/firewall already..

Wobbly · 19. Mai 2023

Thanks for the responses. My OMV is purely behind a router and just use for local file sharing/backup along with hosting all my digital music using Logitech Media Server.

ryecoaaron · 19. Mai 2023

If you have Windows boxes on your network and you enabled smb1 (full of security holes) for LMS, I would think about running clamav on your omv box.

Wobbly · 19. Mai 2023

SMB is just to allow shared folders to both Windows and Linux hosts.

Logitech Media Server is running on Debian directly, it is not in an OMV container.

I have original Squeezebox players plus PPi Zero W running Squeezelite as players off LMS.

Would having Windows as SMB clients be a reason to run clamav? I am not sure why LMS as a server would increase the risk.

ryecoaaron · 19. Mai 2023

Zitat von Wobbly

Would having Windows as SMB clients be a reason to run clamav? I am not sure why LMS as a server would increase the risk.

I was thinking LMS was reading samba shares. That obviously isn't the case. So, it doesn't increase the risk. And if you didn't enable smb1, then ignore my previous post.

CLAMAV and FAIL2BAN - General discussion

Jetzt mitmachen!

Tags