Let's configure the iptables to accept the required connections only by them (of course, do the following as root): First of all, install iptables, to use them as a host firewall to our syslog server:Īssuming that your SOHO firewall (the logs of which you want to store into the syslog server) has an IP of 192.168.1.101 and your PC from where you access the raspberry has an IP of 192.168.1.60, Now, we'll add the required software / packages.
Moebius does not use OpenSSH, but Dropbear (it saves more than 10 MBytes of RAM):ĭROPBEAR_PORT=45323 #the TCP port that your Dropbear server will listen on DROPBEAR_EXTRA_ARGS="-w" #Disallow root logins Of course, do not forget to change your root's password too, if you haven't already done it.įirst, let's harden ssh. Useradd myuser -d /home/myuser -m -s /bin/bash
nfig -normal), updating it ( apt-get update and then apt-get upgrade, as in any Debian-based system), and finally, restarting it, it's now time to tailor it No grahpics required, not significant cpu-power or memory requirements,Įtc, some just storage for storing text logs.Īs an OS, I decided to use moebius linux, a Raspbian based and consequently, Debian based one, just because it is minimalistic,Īfter copying the image to a 2GB SD card, it seems to be more than enough, (for installation instructions please check here), login into it (using ssh of course), configuring it (using nfig or Make it a syslog server for my home firewall (running on pfsense).
I was trying to find a good reason to buy the well-known raspberry pi, apart from the usual ones, and I decided that it would be ideal to
0 kommentar(er)
