this post was submitted on 27 Aug 2026
5 points (77.8% liked)

Self Hosted - Self-hosting your services.

20838 readers
2 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules

Important

Cross-posting

If you see a rule-breaker please DM the mods!

founded 5 years ago
MODERATORS
 

I was reading on the web that clamav is not an "endpoint antivirus solution" but at the same time its called the best antivirus for gnu/linux and gnu/linux servers. Is worth for a home server?

top 7 comments
sorted by: hot top controversial new old
[–] frongt@lemmy.zip 7 points 1 week ago (2 children)

Not really. I mean it does the job, it's a real AV that will catch malware, but it's not a modern product. Its primary use is for corporations needing to meet a "you must have antivirus" compliance requirement.

The best defense against Linux malware is reviewing stuff before you run it. And not running random stuff as root. And not piping curl/wget to bash, especially not sudo bash.

And of course don't expose stuff to the Internet unless you have to. And if you do, isolate each service, so that an attacker can't pivot once they're in your network.

[–] maxihuenu@lemmy.ml 1 points 1 week ago (2 children)

what isolation is? is something like containerization (docker)sorry im noob. ty

[–] umbrella@lemmy.ml 1 points 1 week ago* (last edited 1 week ago)

yes like that. you set up your network and permissions and access in a whitelist so that your service can strictly only manipulate what's needed.

as in if it only needs access to these directories, or these endpoints that's all it's gonna get.

[–] frongt@lemmy.zip 0 points 1 week ago

Network isolation. Internet-facing services should be in a DMZ, and unable to talk to each other unless specifically allowed.

Containerization is good too, but not a substitute.

[–] obelisk_complex@piefed.ca 1 points 1 week ago

When I switched to Linux, I encased my computer in carbonite. Made it immutable and impenetrable, in one go!

[–] mhzawadi@lemmy.horwood.cloud 1 points 1 week ago

Clamav is a full antivirus, but is missing on access scanning. It's used a lot as a plugin to server software as you can feed it files and get a yes or no back.

I would not recommend using it as endpoint protection, for that I would look at bitdefender. I use at work and it does the job

[–] PragmaticOne@lemmy.world 1 points 1 week ago

If you are on Windows then there is no reason to use it. Windows Defender is excellent and MS put A LOT of effort in making sure it’s that way.

If you’e on Unix/Linux it’s pointless other than to scan stuff thats come from a Windows network.