I am going over LuCi settings in latest 4.7.0 firmware, and I like to get some clarifications or point me to an information regarding each topic.
Under System / Administration / SSH Access tab. Why are there two options
Allow SSH password authentication
Allow the root user to log in with password
Since you can't create a new user, as I was told in a different thread, then why have Allow SSH password authentication, since the other in reality controls the root account. Am I missing something? Or should the first option be removed?
Next is Status / Firewall. There is a big yellow message at the top of the screen. This is default firewall settings after firmware upgrade and factory settings. Here is the screen shot
Clicking on Open iptnbles rules overview..., brings out other page, but I do not see anything pointing me to the possible cause or give a hint what to look for. Anyone looked this and it is familiar how to clear/fix it? Instead of Dismissing it?
Actually you can on pure OpenWrt but not by default, you need some packages to make adduser work, from a server perspective it is advised to use non root, but since you run this behind a firewall it should be fine with ssh blocked over wan, only a strong password or keys are more than enough.
Don't worry about this, OpenWrt moved from iptables to nftables, however the gl software still relies on iptables, it is for vpn policies etc.
what this message tells you is hey there are two firewalls so I let you know if you go make rules with the deprecated iptables command nftables doesn't know about it.
