Re: The impact of removing rsyslog from Trixie

[Charles Curley <charlescurley@charlescurley.com>]

On Mon, 17 Feb 2025 16:52:13 -0500
Dan Ritter <dsr@randomstring.org> wrote:

> Greg Wooledge wrote: 
> > 
> > Do you have any kind of automation that reads log files?  Like, that
> > thing whose name I cannot remember right now, that reads ssh's
> > auth.log file looking for repeated failed logins, and updates your
> > firewall rules.  
> 
> 
> fail2ban
> 
> 

I can report that fail2ban on Bookworm (1.0.2-2) runs just fine with no
syslog on the system; journalctl only.

Several of my systems that run Bookworm and Trixie run fine and dandy
without rsyslog.

-- 
Does anybody read signatures any more?

https://charlescurley.com
https://charlescurley.com/blog/