telekom-security/tpotce
1
0
Fork 0
mirror of https://github.com/telekom-security/tpotce.git synced 2025-07-02 01:27:27 -04:00
Code Issues Packages Projects Releases Wiki Activity

tweaking

Browse Source 
where possible kibana visualizations are converted to lens objects (more than 100 objects)
all dashboards have been updated
fixes #1392 for leaving SentryPeer log tag out
add wordpot dashboard
after discussion (#1486) and testing iptables-legacy is no longer required
include all kibana objects for installation
cleaning up some service scripts
This commit is contained in:
t3chn0m4g3
2024-03-18 16:19:49 +01:00
parent 3546e31a7c
commit 234fb16394
15 changed files with 564 additions and 41 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
docker/tpotinit/dist/bin/rules.sh vendored
View File

@ -44,14 +44,14 @@ function fuSETRULES {
### Setting up iptables-legacy rules for honeytrap
if [ "$myNFQCHECK" == "honeytrap" ];
then
iptables-legacy -w -A INPUT -s 127.0.0.1 -j ACCEPT
iptables-legacy -w -A INPUT -d 127.0.0.1 -j ACCEPT
iptables -w -A INPUT -s 127.0.0.1 -j ACCEPT
iptables -w -A INPUT -d 127.0.0.1 -j ACCEPT
for myPORT in $myRULESPORTS; do
iptables-legacy -w -A INPUT -p tcp --dport $myPORT -j ACCEPT
iptables -w -A INPUT -p tcp --dport $myPORT -j ACCEPT
done
iptables-legacy -w -A INPUT -p tcp --syn -m state --state NEW -j NFQUEUE
iptables -w -A INPUT -p tcp --syn -m state --state NEW -j NFQUEUE
fi
### Setting up iptables-legacy rules for glutton
@ -71,14 +71,14 @@ function fuUNSETRULES {
### Removing iptables-legacy rules for honeytrap
if [ "$myNFQCHECK" == "honeytrap" ];
then
iptables-legacy -w -D INPUT -s 127.0.0.1 -j ACCEPT
iptables-legacy -w -D INPUT -d 127.0.0.1 -j ACCEPT
iptables -w -D INPUT -s 127.0.0.1 -j ACCEPT
iptables -w -D INPUT -d 127.0.0.1 -j ACCEPT
for myPORT in $myRULESPORTS; do
iptables-legacy -w -D INPUT -p tcp --dport $myPORT -j ACCEPT
iptables -w -D INPUT -p tcp --dport $myPORT -j ACCEPT
done
iptables-legacy -w -D INPUT -p tcp --syn -m state --state NEW -j NFQUEUE
iptables -w -D INPUT -p tcp --syn -m state --state NEW -j NFQUEUE
fi
### Removing iptables-legacy rules for glutton