Introduction

Kaspersky Anti-Virus is now one of the popular anti-virus softwares. The strong point are that it can detect and clean most of virus, light weight – it consumes less system resource comparing with other anti-virus softwares and Kaspersky’s signature is updated regularly (about every 2 hours).

Today, I have to setup Kaspersky Anti-Virus for Linux Workstation on a RedHat Enterprise 4. But in my environment, I can’t update signature from the Internet directly because it’s a separated network. So I have to manually update the signature myself. And I’ll install only few servers so there’s no need to install administration console for centralize management Kaspersky’s product. Therefore, I’ll not install Kaspersky Network Agent.

This article, I’ll show how to install Kaspersky Anti-Virus 5.7 on Linux RedHat Enterprise 4 by starting from install Webmin first. Then, I’ll install Kaspersky Workstation 5.7 and update the signature manually. Finally, I’ll add cronjobs to perform a scanning every week.

Note: Webmin is a web-based interface for system administration for Unix which will be used for configure Kaspersky Workstation.

Section

1. Install Webmin on Linux RedHat Enterprise 4
2. Install Kaspersky Anti-Virus Workstation 5.7 on Linux RedHat Enterprise 4
3. Manually Update the Kaspersky Anti-Virus’s signature
4. Start the Kaspersky Anti-Virus On-Access Scanner
5. Add cronjobs to run Kaspersky Scanner

Step-by-step

Install Webmin on Linux RedHat Enterprise 4

1. Login as ‘root’ on Linux RedHat Enterprise 4 server. You may be logged in as other user and use ‘su’ command to execute as ‘root’.
   
2. Insert Kaspersky’s CD on the server. I got it from Kaspersky’s vendor. Copy these .rpm files to local server.
   • Webmin: webmin-1.370-1.noarch.rpm
   • Kaspersky Workstation 5.7 for Linux: kav4ws-5.7-17.i386.rpm
   • Kaspersky’s CDKey: CDKEY.key
   • Kaspersky’s signature: av-i386-cumul.zip

   Note: For webmin, you can find one at www.webmin.com. For av-i386-cumul.zip, you can find the latest signature one at kaspersky.com.
   

3. Open Terminal by right click on any space on the desktop and select Open Terminal. Type the command below to install Webmin.
   

   rpm -ivh /root/Desktop/webmin-1.370-1.noarch.rpm

   When the installation finishes, it’ll show how to open Webmin as in the figure. In this example, it tells I can open Webmin by browse to http://localhost.localdomain.com:10000 and login using ‘root’ account.
   

4. Test if you can access Webmin by open the browser and enter the url that you get from the last step. It’ll ask for user account for Webmin server. Enter your account user and password.
   
5. Now you’ll see the main page of Webmin. The Webmin has been installed successfully.
   

Back to top

Install Kaspersky Anti-Virus Workstation 5.7 on Linux RedHat Enterprise 4

1. Back to Terminal. Type the command below to install Kaspersky Workstation 5.7.
   

   rpm -ivh /root/Desktop/kav4ws-5.7-17.i386.rpm

   When the installation finishes, it recommends you to run postinstall.pl to configure Kaspersky Anti-Virus.
   

2. Run postinstall.pl to configure it by type the command below.
   

   /opt/kaspersky/kav4ws/lib/bin/setup/postinstall.pl

   

3. The first thing that the configuration asks is the license key of Kaspersky. You can obtain this file from Kaspersky by buying the product. Type only the folder that you keep the file. In this example, I have the license key file on /root/Desktop/CDKEY.key so I type
   

   /root/Desktop

   Note: When configuration finishes, you can delete the license key file. Kaspersky has already load the license to its system.
   

4. Next, the configuration asks for the proxy to access the Internet to get updates. Since I’ll configure an offline system, I can ignore this configuration. I simply press ‘Enter’ to accept default value ([No]).
   
5. Next, it asks to update the signature. Again, this is offline system. I’ll type ‘no’.
   Note: For the first time of installation, you have to update the signature at least once. Otherwise, it can’t run. I’ll manually update the signature in the next few steps.
   
6. Next, it asks to compile kavmonitor, simply press ‘Enter’ to proceed.
   
7. Now the Kaspersky Anti-Virus for Linux Workstation is installed. You’ll noticed some error but it’ll be solved after update the signature.
   
8. Check if Kaspersky Anti-Virus for Linux is installed properly by open Webmin. Browse to Other -> KAV 5.7 for UNIX WS. This is the configuration page for Kaspersky Anti-Virus 5.7.
   Note: If you don’t see this menu, recheck the Kaspersky’s configuration again.
   
9. Now Kaspersky Anti-Virus for Linux can’t be started yet since you haven’t update the signature. Click on Key Info to view license information.
   
10. You’ll see an error on license page. Don’t worry, this will be solved by update the signature.
    

Back to top

Manually Update the Kaspersky Anti-Virus’s signature

1. On Desktop, extract av-i386-cumul.zip to a folder. In this example, I extract all files to /root/Desktop/Updates/.
   
2. Back to Webmin, click on KeepUp2Date in Other -> KAV 5.7 for UNIX WS.
   
3. On KeepUp2Date menu, browse to misc settings. Check ‘Use update server url’ and ‘Use update server url only’ and change ‘Update server url’ to the folder where you have extracted the signature files. In this example, it is ‘/root/Desktop/Updates/’. And click Save.
   Note: The ‘Update server url’ path must be follow with ‘/’.
   
4. Open Terminal and type the command below to update the signature.
   

   /opt/kaspersky/kav4ws/bin/kav4ws-keepup2date

   

5. Waiting until the update is finished, you’ll see some error message because Kaspersky Anti-Virus hasn’t started yet.
   
6. Now the signature is up-to-date. Browse to Key Info on Webmin again, the license info has been shown correctly.
   

Back to top

Start the Kaspersky Anti-Virus On-Access Scanner

1. Before start Kaspersky Anti-Virus On-Access Scanner, you can configure how to handle when Kaspersky Anti-Virus found suspicious, infected files in ‘AV File Check’ and ‘AV File Monitor’. I’ll not cover in these configuration.
   
2. When you have finished configuration, next I’ll start Kaspersky Anti-Virus On-Access Scanner by click on ‘AV Run’.
   
3. Browse to the bottom of the page, click ‘Start’ button on Kaspersky Anti-Virus On-Access Scanner.
   
4. It’ll show Kaspersky Anti-Virus On-Access Scanner Output.
   
5. Back to ‘AV Run’, you’ll see the service status is started with no errors (Exit code:0).
   

Back to top

Add cronjobs to run Kaspersky Scanner

1. Open Terminal, type the command below to view current cronjobs.
   

   crontab -l

   

2. Type the command below to edit cronjob.
   

   crontab -e

   Note: You can customize the frequency to run these jobs by change the values. For more information about cronjobs, see Crontab – Quick reference.
   

3. On the cronjob’s editor, add these 2 lines and save the file.
   

   0 0 * * 4 /opt/kaspersky/kav4ws/bin/kav4ws-kavscanner
   0 0 * * 3 /opt/kaspersky/kav4ws/bin/kav4ws-keepup2date

   

4. Review the cronjobs again by type the command.
   

   crontab -l

   

5. Now you have finished configure cronjobs.

Summary

Now I have Kaspersky Anti-Virus 5.7 Workstation on Linux RedHat. The routine that I need to do is to update the anti-virus’s signature regulary to ensure that the servers are safe from virus threats. For ease of management, you can extend by implement Kaspersky Administration console to manage Kaspersky’s product.

Related posts:

1. Test anti virus with text file
2. How to install VMWare Server on Linux Redhat
3. How to change IP Address on Linux Redhat

Introduction

Most of the time, I work in Windows environment. But I sometimes have to work on Linux platform, too. So I decide to note it down this topic to remind myself.

There are many ways to change IP Address on Linux. First one is the easiest way that configure on GUI because it’s like on Windows platform. The second way is configure on command-line but it is only temporary, it’ll reload to the old configuration when the network service is restart. And the last one is also configure on command-line to change IP Address permanently.

Section

1. Configure on GUI (Permanently)
2. Configure on commad-line (Temporary)
3. Configure on commad-line by edit configuration file (Permanently)

Step-by-step

Configure on GUI (Permanently)

1. Select Application -> System Settings ->Network.
   
2. On Network Configuration and Devices tab, you’ll see available network card on the PC. In this example, the PC has 1 network interface card (NIC) and it’s currently inactive. Double click on the network interface card (NIC) that you want to configure to open its property.
   
3. On Ethernet Device, you can configure the NIC to be either DHCP or static IP Address. When you finish, click OK.
   
4. There is a pop-up message ask for activate the NIC. Click Yes to enable the NIC.
   
5. The NIC will be restarted to reload the new configurations and the NIC is active now.
   

Back to top

Configure on commad-line (Temporary)

Note: This way change IP Address only temporary. When you restart network service, it’ll load from configuration file to replace this configuration.

1. Open Terminal.
2. Type
   

   ifconfig -a

   to list all network interface card on the current PC.
   

3. Type
   

   ifconfig eth0 192.168.125.10 netmask 255.255.255.0 up

   to configure IP Address on interface eth0.
   

4. Note: To configure gateway, type

   route add default gw [gateway address].

Back to top

Configure on commad-line by edit configuration file (Permanently)

1. Open Terminal.
2. Open network configuration file. In this example, it’ll configure on interface eth0. Type
   

   vi /etc/sysconfig/network-scripts/ifcfg-eth0

   

3. The current configuration is DHCP.
   
4. Modify the file by press ‘i’ to enter insert mode. Change BOOTPROTO to static and add IP Address and Net mask as new lines if they’re not existed yet..
   

   BOOTPROTO=static
   IPADDR=192.168.125.10
   NETMASK=255.255.255.0

   Save the configuration file by press ESC + ‘:’ and type ‘wq’ to write and quit the editor.
   

5. You can added these configuration to the config file. Replace [number] with your actual value.
   

   GATEWAY=[number]
   TYPE=Ethernet
   NETWORK=[number]
   BROADCAST=[number]

6. Restart the network interface card. Type
   

   service network restart

   

7. Review the configuration. Type
   

   ifconfig

   . The IP Address has been changed permanently.
   

Back to top

Related posts:

1. How to install VMWare Server on Linux Redhat
2. How to setup Stand-Alone Kaspersky Anti-Virus 5.7 Workstation on Linux RedHat

Introduction

Nowadays, virtualization is a solution which is interested by many IT manager. By converting existing system to virtual, you can save lot of money from buying new hardware every year, avoid hardware conflicts when you move virtual to another computer, etc. But when you convert system to virtual, you still need OS to run virtual software (VMWare, Virtual PC, etc).

The best practice is to have Linux operationg system running on host so that you won’t have to pay an additional license. Then, you can have whatever OS you want on virtual. For virtual software, VMWare is the one I recommend to try. There are some free licenses if you want to try. Like VMWare Server, you can have many virtual on a PC and you can connect to manage your virtuals remotely by using VMWare Server Console. This article shows how to install VMWare Server on Redhat Enterprise 4.

Step-by-step

1. Install prerequisite program on Redhat. To install VMWare Server on Linux, you need to install gcc compiler and xinetd before install VMWare Server. By default, xinetd is already installed on Redhat Enterprise 4 so you only need to install gcc.
   • To install gcc, click Application -> System Settings -> Add/Remove Applications
     
   • Browse to ‘Development’ section and check ‘Development Tools’. Click update.
     
   • This will show what are going to install.
     Note: To install this, you may requires Redhat installation CD (disc 3).
     
2. Now download VMWare Server for Linux from vmware.com. Also, you need to register for a free serial number. When writing this article, the latest version is 1.0.4. I have copied the setup file to my desktop. In this example, I logged in as ‘root’ for installation and configuration VMWare Server.
   
3. Open terminal, extract the zipped file by type ‘tar xvfz “your-file-name.tar.gz”‘.
   

   tar xvfz VMWare-server-1.0.4-56528.tar.gz

   

4. When extract finishes, you’ll see the VMWare Server on desktop or at the same place with your zipped file.
   
5. Run the installation file. Open Terminal and change directory to the extracted folder and execute vmware-install.pl.
   

   cd vmware-server-distrib/
   ./vmware-install.pl

   

6. This is the steps for installation and configuration VMWare Server. If you don’t know what value to enter, you can simply press Enter button to accept the default value in the bracket [ ] which is provided by the installation file. In this example, I install and configure as default value setting so I only press Enter on each question.
   • The installation file asks for paths to install files (1-7).
     
   • The installation file asks for path to install documentation (8-9). Also, it asks for configure VMWare Server now (10). If yes, press Enter to view End User License Agreement (10).
     
   • Press Ctrl + C to exit the EULA and type ‘y’ or ‘yes’ to accept the EULA (11).
     
   • The configuration continue asks for path to install file (12-14) and whether to configure NAT network for VMWare Server now (15-16).
     
   • The configuration asks for configure Host-only network for VMWare Server (19-20).
     
   • The configuration asks for port which for remotely connection to this VMWare Server Console (22).
     
   • The configuration asks for path to keep virtual machine files (23) and serial number for VMWare Server (25). You can get one by register at vmware.com for free. If you don’t have now, you can enter this number later but it suggest you should enter it now. Otherwise, you need to re-run the config file again.
     
   • Whether you enter the serial number now or not, the configuration is finished. You’ll see VMWare service is starting.
     
7. Try open VMWare Server Console, select Applications -> System Tools -> VMWare Server Console.
   
8. VMWare Server Console ask you to connect to which VMWare Server. Select Localhost and click connect.
   
9. That’s it. You can manage your virtual machine here.
   

Related posts:

1. How to setup Stand-Alone Kaspersky Anti-Virus 5.7 Workstation on Linux RedHat
2. How to change IP Address on Linux Redhat

Introduction

As an Windows administrator, I always have to work with many Windows servers. Most of the time, I use remote access rather than go to in front of each server. This can be done easily because they’re the same platform. But sometime I also need to access Linux server from Windows XP, too. This can be done by using VNC. By default, VNC is alrealy installed on Redhat so I only need to configure it as VNC server and I have to install VNC Viewer on Windows XP. When enable this service, please keep in my that others can also remote to the server with this protocol, too!. So if your network can’t be trusted, do not enable the vncserver service. But in my case, I have firewall to limit only from my computer and the network is trusted.

VNC stands for Virtual Network Computing. It is remote support software which allows you to view and fully interact with one computer desktop (the “VNC server”) using a simple program (the “VNC viewer”) on another computer desktop anywhere on the Internet. The two computers don’t even have to be the same type, so for example you can use VNC to view a Windows Vista desktop at the office on a Linux or Mac computer at home. For ultimate simplicity, there is even a Java viewer, so that any desktop can be controlled remotely from within a browser without having to install software.

Step-by-step

In this section, I’ll show how to configure VNC server on Redhat server and using VNC Viewer connect the server remotely from Windows XP.

1. On Redhat server, login with your username that you want to enable remote access. In this example, I will use ‘admin’ user.
   
2. Open Terminal, type ‘vncpasswd’. Type your password and verify password again. This command will use to set you password for remote access for the current user.
   
3. Before next step, you need to logged on as root by type ‘su root’.
   
4. Edit the file /etc/sysconfig/vncservers by type ‘ vi /etc/sysconfig/vncservers’.
   Note: If you are new to Linux, vi is an editor tool in command line mode on Linux.
   
5. You’ll see text file as in the figure below. Next, I’ll edit on the highlight line.
   
6. Uncomment on the highlight line. If you have more than one usernames that want to enable remote acces, you can change VNCSERVERS value in this format, “1:username1 2:username2 3:username3 ….”. In this example, I have only one user which is root so this line of mine is ‘VNCSERVERS = “1:admin”‘.
   
7. Now save the file and exit. To save file, hold ESC + ‘:’ and type ‘wq’ to write and quit file.
   
8. Next, log off the user if you are not user ‘root’ and log in as root. Enable VNC service by type ‘chkconfig vncserver on’. Then, start the VNC service by type ‘service vncserver start’.
   
9. If you have firewall enable on Redhat, be sure that your firewall configuration won’t block connection from remote computer by open port TCP 5901 for remote access. Open Applications -> System Settings -> Security Level. Add ’5901:tcp’ on Other ports.
   Note: VNC uses TCP protocol on port 5901.
   
10. Now you can connect Redhat server from remote computer. On my Windows XP computer, open VNC Viewer on Windows XP, type IP Address of Redhat server with number as a username specify in step 6. In this example, I want to remote to Redhat server as ‘admin’ user which I assign as number 1 in step 6 (1:admin) and my Redhat server is 10.110.141.220. So I type ’10.110.141.220:1′.
    Note: You can download VNC Viewer for free at realvnc.com
    
11. Type your password for ‘admin’ user which has been assign in step 2.
    
12. Now you have connect to Redhat server remotely. But you’ll see that the interface looks different. You have to do a little thing more.
    
13. On Redhat server, open terminal and type ‘vi /home/username/.vnc/xstartup’. In this example, I type ‘vi /home/admin/.vnc/xstartup’.
    Note: If you going to enable remote access for user ‘root’, the file would be at ‘/root/.vnc/xstartup’.
    
14. Uncomment these two lines and save the file.
    Note: If you want to force to load Gnome or KDE Desktop on remote access, edit the last line from ‘twm &’ to ‘startx &’ for Gnome and ‘startkde &’ for KDE Desktop.
    
15. Type ‘service vncserver restart’ to apply changes.
    
16. Reconnect using VNC viewer on remote computer again. Now you will see the desktop as you were log in at the server but now you’re remotely .
    

Related posts:

1. How to Enable Remote Desktop Web Connection on Windows