On Mon, 17 Feb 2025 16:52:13 -0500 Dan Ritter <d...@randomstring.org> wrote:
> Greg Wooledge wrote: > > > > Do you have any kind of automation that reads log files? Like, that > > thing whose name I cannot remember right now, that reads ssh's > > auth.log file looking for repeated failed logins, and updates your > > firewall rules. > > > fail2ban > > I can report that fail2ban on Bookworm (1.0.2-2) runs just fine with no syslog on the system; journalctl only. Several of my systems that run Bookworm and Trixie run fine and dandy without rsyslog. -- Does anybody read signatures any more? https://charlescurley.com https://charlescurley.com/blog/