Security

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. It reduces bandwidth and improves response times by caching and reusing frequently-requested web pages.

Squid has extensive access controls and makes a great server accelerator. It runs on most available operating systems including Windows and Linux based and as the leaders in Linux we recommend it.

The Shoreline Firewall is high-level tool for configuring Netfilter. You describe your firewall/gateway requirements using entries in a set of configuration files.

Shorewall reads those configuration files and with the help of the iptables, iptables-restore, ip and tc utilities. It configures Netfilter and the Linux networking subsystem to match your requirements and it can be used on a dedicated firewall system, a multi-function gateway/router/server or on a standalone GNU/Linux system.

 Shorewall does not use Netfilter's ipchains compatibility mode and can therefore take advantage of Netfilter's connection state tracking capabilities.

Shorewall may not be the easiest to use of the available iptables configuration tools but at LinuxIT we believe that it is the most flexible and powerful. So if you are looking for a simple point-and-click set-and-forget Linux firewall solution that requires a minimum of networking knowledge it is worth considering.

If you are looking for a Linux firewall solution that can handle complex and fast changing network environments then Shorewall is a logical choice.

Clam AntiVirus is an Open-Source (GPL) anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways. It provides a number of utilities including a flexible and scalable multi-threaded daemon, a command line scanner and advanced tool for automatic database updates. The core of the package is an anti-virus engine available in a form of shared library.

• Command-line scanner
• Fast, multi-threaded daemon with support for on-access scanning
• Milter interface for sendmail
• Advanced database updater with support for scripted updates and digital signatures
• Virus scanner C library
• On-access scanning (Linux® and FreeBSD®)
• Virus database updated multiple times per day (see home page for total number of signatures)
• Built-in support for various archive formats, including Zip, RAR, Tar, Gzip, Bzip2, OLE2, Cabinet, CHM, BinHex, SIS and others
• Built-in support for almost all mail file formats
• Built-in support for ELF executables and Portable Executable files compressed with UPX, FSG, Petite, NsPack, wwpack32, MEW, Upack and obfuscated with SUE, Y0da Cryptor and others
• Built-in support for popular document formats including MS Office and MacOffice files, HTML, RTF and PDF.