I'm in a similar situation with four systems connected 24/7, and I've got 8 kids accessing the systems, though they don't like my Linux box as much. The other three systems are running WinXP and I've yet to have a problem with viruses/trojans/worms/spyware/adware.
How do you keep your system secure?
RayG
Heh.
Well, I'm probably an exceptional case
I'm a techno-geek, I work security and systems admin for a large insurance company, and I've worked computers for the military as well.
I use a standard defense-in-depth approach. Everything comes in (first) to a Linix-based hardened kernel firewall. I have a WAP connected to the DMZ on this system (mainly to segment it away so any internal network traffic is not re-broadcast over the wireless connection) that services the laptop we use for general browsing and chatting, etc. The firewall is a basic port filtering system, but prevents any externally initiated connections and acts as a NAT box. Additionally, I use the firewall to block access to all but a few websites for my son (he's four, we let him go to hotwheels.com and bob the builder, that type of thing. He's excluded from internet, except for the specific sites we enable). Internal systems are all set for automatic updates, and run virusscanners (with nightly scans and updates) and software firewalls (again with nightly updates). IN addition, all the systems have spyware/adware blockers installed. I also enforce strong passwords, even on my home systems. Additionally, the areas of the system I use to store sensitive information (financial data, taxes, etc) are encrypted. FInally, I have a domain controller with policies set to enforce certain securoty settings, such as password complexity rules, IE securoty settings, and similar.
It sounds like a lot, but most of it is in the setup. Almost everything I use has self-update capability, so all I have to do is watch for alerts and monitor my logs every now and again. THe firewall doesn't self-update, but it does have a web interface for admin (accessible only internally) so it's relatively easy to check for updates there once a week.
