The Gods Are Angry

I find that adding logging at the info level is useful when redirecting ssh to a port other than 22 (change the Port option in /etc/ssh/sshd_config to 19356, for example).  firewall-cmd rich rules allow adding far more control over firewall entries,

# firewall-cmd --add-rich-rule="$(cat rule_ssh_obfuscate.txt)" --permanent

The contents of rule_ssh_obfuscate.txt,

# cat rule_ssh_obfuscate.txt

rule family="ipv4" port port="19356" protocol="tcp" log prefix="ssh19356: " level="info" limit value="1/m" accept

# firewall-cmd --reload

# firewall-cmd  --list-rich-rules rule family="ipv4" port port="19356" protocol="tcp" log prefix="ssh19356: " level="info" limit value="1/m" accept

This way I can tell who is attempting to connect to this port in my kernel logs,

While attempting to configure lollypop (the excellent gnome based music player) I ran into a strange problme with pkgconfig because it couldn’t find x11.pc.  I noticed that the file was in /usr/lib/pkgconfig/x11.pc but pkgconfig wasn’t finding it.  So I pulled out strace and discovered that it was looking in /usr/lib64/pkgconfig.  “Hrm”, thought I.  I pulled out rpm and discovered that the file above was from the wrong package,

# rpm -qf /usr/lib/pkgconfig/x11.pc libX11-devel-1.6.3-2.fc23.i686

After installing the x86_64 version of the libX11-devel pkgconfig worked as expected and configure ran to completion as expected.