this post was submitted on 27 Aug 2026
1 points (100.0% liked)

Self Hosted - Self-hosting your services.

21139 readers
4 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules

Important

Cross-posting

If you see a rule-breaker please DM the mods!

founded 5 years ago
MODERATORS
 

I was reading on the web that clamav is not an "endpoint antivirus solution" but at the same time its called the best antivirus for gnu/linux and gnu/linux servers. Is worth for a home server?

top 5 comments
sorted by: hot top controversial new old
[–] frongt@lemmy.zip 0 points 1 month ago (1 children)

Not really. I mean it does the job, it's a real AV that will catch malware, but it's not a modern product. Its primary use is for corporations needing to meet a "you must have antivirus" compliance requirement.

The best defense against Linux malware is reviewing stuff before you run it. And not running random stuff as root. And not piping curl/wget to bash, especially not sudo bash.

And of course don't expose stuff to the Internet unless you have to. And if you do, isolate each service, so that an attacker can't pivot once they're in your network.

[–] maxihuenu@lemmy.ml 0 points 1 month ago (2 children)

what isolation is? is something like containerization (docker)sorry im noob. ty

[–] umbrella@lemmy.ml 0 points 1 month ago* (last edited 1 month ago)

yes like that. you set up your network and permissions and access in a whitelist so that your service can strictly only manipulate what's needed.

as in if it only needs access to these directories, or these endpoints that's all it's gonna get.

[–] frongt@lemmy.zip 0 points 1 month ago

Network isolation. Internet-facing services should be in a DMZ, and unable to talk to each other unless specifically allowed.

Containerization is good too, but not a substitute.

[–] mhzawadi@lemmy.horwood.cloud 0 points 1 month ago

Clamav is a full antivirus, but is missing on access scanning. It's used a lot as a plugin to server software as you can feed it files and get a yes or no back.

I would not recommend using it as endpoint protection, for that I would look at bitdefender. I use at work and it does the job