- PFSENSE RASPBERRY PI INSTALL
- PFSENSE RASPBERRY PI UPDATE
- PFSENSE RASPBERRY PI SOFTWARE
- PFSENSE RASPBERRY PI PASSWORD
- PFSENSE RASPBERRY PI PC
Uninstall it, for our purposes we shall use syslog-ng: Moebius uses the inetutils-syslogd software. Iptables-save > /etc/nf echo '#!/bin/bash' > /etc/network/if-up.d/iptables echo '/sbin/iptables-restore > /etc/network/if-up.d/iptables chmod +x /etc/network/if-up.d/iptables
PFSENSE RASPBERRY PI PC
Iptables -I INPUT 1 -p udp -src 192.168.1.101 -dport 514 -j ACCEPT #to accept syslog connections from your SOHO firewall iptables -I INPUT 2 -p tcp -src 192.168.1.60 -dport 45323 -m state -state NEW -j ACCEPT #to accept ssh connections from your pc iptables -A INPUT -j ACCEPT -m state -state ESTABLISHED,RELATED iptables -I INPUT 3 -src 192.168.1.60 -p icmp -m icmp -icmp-type 8 -j ACCEPT #to check from your PC whether raspberry is alive iptables -P INPUT DROP #Default dropping policy Let's configure the iptables to accept the required connections only by them (of course, do the following as root):
PFSENSE RASPBERRY PI INSTALL
First of all, install iptables, to use them as a host firewall to our syslog server:Īssuming that your SOHO firewall (the logs of which you want to store into the syslog server) has an IP of 192.168.1.101 and your PC from where you access the raspberry has an IP of 192.168.1.60,
PFSENSE RASPBERRY PI SOFTWARE
Now, we'll add the required software / packages. Moebius does not use OpenSSH, but Dropbear (it saves more than 10 MBytes of RAM):ĭROPBEAR_PORT=45323 #the TCP port that your Dropbear server will listen on DROPBEAR_EXTRA_ARGS="-w" #Disallow root logins
PFSENSE RASPBERRY PI PASSWORD
Of course, do not forget to change your root's password too, if you haven't already done it.įirst, let's harden ssh. Useradd myuser -d /home/myuser -m -s /bin/bash
PFSENSE RASPBERRY PI UPDATE
nfig -normal), updating it ( apt-get update and then apt-get upgrade, as in any Debian-based system), and finally, restarting it, it's now time to tailor it
No grahpics required, not significant cpu-power or memory requirements,Įtc, some just storage for storing text logs.Īs an OS, I decided to use moebius linux, a Raspbian based and consequently, Debian based one, just because it is minimalistic,Īfter copying the image to a 2GB SD card, it seems to be more than enough, (for installation instructions please check here), login into it (using ssh of course), configuring it (using nfig or Make it a syslog server for my home firewall (running on pfsense). I was trying to find a good reason to buy the well-known raspberry pi, apart from the usual ones, and I decided that it would be ideal to
0 kommentar(er)
