I am having to fill in a questionaire designed by SecurityMetrics to conform to PCI Compliance standards and am painfully getting fined for non-compliance.  I told them I was running Ubuntu Linex and that the ports are closed.  They still said I have to complete the questionare to obtain complaince.

The questions I am not sure how to answer are to do with firewall software and the configeration is to the standard they require; whether I need to install anti-virus software: and on what criticial security patches I have.

I have tried saying the above items do not apply and it comes out FAIL!

I am running Ubuntu 12-04 LTS and always get the updates.

Any help would be appreciated. Thanks.

• errol’s blog