tweaking glutton, signals

docker/glutton/Dockerfile

@@ -12,7 +12,8 @@ RUN apk -U --no-cache add bash \
                           iptables-dev \
                           libnetfilter_queue-dev \
                           libpcap-dev \
-                          procps && \
+                          procps \
+                          upx && \
 
 # Setup go, glutton
     export GOPATH=/opt/go/ && \
@@ -27,6 +28,7 @@ RUN apk -U --no-cache add bash \
     mv /opt/go/src/github.com/mushorg/glutton/bin /opt/glutton/ && \
     mv /opt/go/src/github.com/mushorg/glutton/config /opt/glutton/ && \
     mv /opt/go/src/github.com/mushorg/glutton/rules /opt/glutton/ && \
+    upx /opt/glutton/bin/server && \
 
 # Setup user, groups and configs
     addgroup -g 2000 glutton && \
@@ -38,7 +40,8 @@ RUN apk -U --no-cache add bash \
     apk del --purge build-base \
                     git \
                     go \
-                    g++ && \
+                    g++ \
+                    upx && \
     rm -rf /var/cache/apk/* \
            /opt/go \
            /root/dist

docker/glutton/dist/rules.yaml

@@ -1,22 +1,27 @@
+# Put passthrough rules on top, drop rules on bottom, rules are applied in order (top down)
 rules:
+  - match: udp dst port 53
+    type: passthrough
+  - match: tcp dst port 21
+    type: conn_handler
+    target: ftp
   - match: tcp dst port 23 or port 2323 or port 23231
     type: conn_handler
     target: telnet
   - match: tcp dst port 25
     type: conn_handler
     target: smtp
-  - match: tcp dst port 3389
-    type: conn_handler
-    target: rdp
   - match: tcp dst port 445
     type: conn_handler
     target: smb
-  - match: tcp dst port 21
+  - match: tcp dst port 3389
     type: conn_handler
-    target: ftp
+    target: rdp
   - match: tcp dst port 5060
     type: conn_handler
     target: sip
   - match: tcp
     type: conn_handler
     target: default
+  - match: 
+    type: drop

docker/glutton/notes

@@ -0,0 +1,2 @@
+dtagdevsec/glutton         1804                44eed3090ae5        12 hours ago        35.3 MB
+