rsyslog a bad idea? Problems with ssh, openssh-server, fail2ban
Hi guys,
after writing this I realised that the introduction is quite long; for the actual question you can hop to the last paragraph.
I naively used ssh to connect my phone to the computer, until I recently found out that this is apparently very insecure.
So now I am trying to harden the system by
-excluding IPv6 adresses (done)
-changing the port (yet to be done)
-using a key instead of a password (yet to be done; there's a brief manual in the wiki, but I could not do it, so I will have to look for more foolproof resources)
-installing fail2ban
After installing fail2ban (which is supposed to block IP adresses which fail to enter a correct password for more than x times) I noticed that it did not work: I could enter as many wrong passwords as I pleased and still log in. I finally found out that the reason was that the file /var/log/auth.log was missing and that I could solve the problem by installing rsyslog.
Was it a bad idea to install rsyslog? I'm asking because I guess that the devs had a reason to leave it out. Could it maybe drain the battery, quickly use up a lot of disk space or do anyting else that would be undesired on a pinephone?
after writing this I realised that the introduction is quite long; for the actual question you can hop to the last paragraph.
I naively used ssh to connect my phone to the computer, until I recently found out that this is apparently very insecure.
So now I am trying to harden the system by
-excluding IPv6 adresses (done)
-changing the port (yet to be done)
-using a key instead of a password (yet to be done; there's a brief manual in the wiki, but I could not do it, so I will have to look for more foolproof resources)
-installing fail2ban
After installing fail2ban (which is supposed to block IP adresses which fail to enter a correct password for more than x times) I noticed that it did not work: I could enter as many wrong passwords as I pleased and still log in. I finally found out that the reason was that the file /var/log/auth.log was missing and that I could solve the problem by installing rsyslog.
Was it a bad idea to install rsyslog? I'm asking because I guess that the devs had a reason to leave it out. Could it maybe drain the battery, quickly use up a lot of disk space or do anyting else that would be undesired on a pinephone?