I like to auto-upgrade fedora systems with yum-cron. To do the same thing on raspbian:
rpi# aptitude install cron-apt
rpi# echo 'dist-upgrade -y' > /etc/cron-apt/action.d/4-upgrade
You can monitor /var/log/cron-apt/log and /var/log/apt/history.log to confirm that upgrades are happening.
Random bits of mostly technical stuff, usually from cases where no good search hits addressed a problem, and I feel the need to document the solution in a note to myself. I figure that if I blog it, then at least it'll be findable by others, too.
Monday, June 17, 2013
Monday, May 20, 2013
OpenWrt - restrict LuCI and ssh to a specific host
For security, I only ever want to connect to my OpenWrt router from a specific internal host. Here is the firewall setup to accomplish that.
relevant part of /etc/config/firewall:
# Only allow 192.168.1.6 to access LuCI http
config 'rule'
option '_name' 'Restrict-LuCI-http'
option 'src' 'lan'
option 'src_ip' !192.168.1.6
option 'dest_ip' 192.168.1.1
option 'dest_port' 80
option 'proto' 'tcp'
option 'target' 'REJECT'
# Only allow 192.168.1.6 to access LuCI https
config 'rule'
option '_name' 'Restrict-LuCI-https'
option 'src' 'lan'
option 'src_ip' !192.168.1.6
option 'dest_ip' 192.168.1.1
option 'dest_port' 443
option 'proto' 'tcp'
option 'target' 'REJECT'
# Only allow 192.168.1.6 to access ssh
config 'rule'
option '_name' 'Restrict-ssh'
option 'src' 'lan'
option 'src_ip' !192.168.1.6
option 'dest_ip' 192.168.1.1
option 'dest_port' 22
option 'proto' 'tcp'
option 'target' 'REJECT'
Sunday, May 5, 2013
Things to do in Seattle
I've been maintaining a list of things to do in Seattle and the surrounding area since I moved here. And here it is: http://goo.gl/HVddr
Leave a comment if you have things I should add.
Leave a comment if you have things I should add.
Subscribe to:
Posts (Atom)