[arm-allstar] Allstar security justification for local college

[LaRoy McCann]

I was ask to help a local club add an Allstar / Echolink interface to 
their existing repeater controller.
They presently use an RF link to provide their repeater with Echolink 
but are wanting to use a Pi and Allstar since they have internet access 
and do away with the RF link.

Their repeater is located at a local college and the IT department wants 
to know about the Pi and it's security before they provide internet 
access for it.  I was starting to do a security write-up but was 
wondering if anyone has anything they have prepared before and would be 
willing to share it.

Anyone have any suggestions that I need to do in order to make it as 
secure as possible.
I intend to place this behind a mikrotik router and block all ports 
except for the ones needed by allstar, echolink and ssh and do the same 
on the Hamvoip image.

Should I add fail2ban?


LaRoy K5TW



---
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus