telekom-security/tpotce
1
0
Fork 0
mirror of https://github.com/telekom-security/tpotce.git synced 2025-07-02 01:27:27 -04:00
Code Issues Packages Projects Releases Wiki Activity

Installer upgrade

Browse Source
This commit is contained in:
t3chn0m4g3
2015-01-27 17:46:52 +01:00
parent 1cb5191bba
commit 41ab55f957
18 changed files with 420 additions and 232 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
installer/upstart/honeytrap.conf Normal file
View File

@ -0,0 +1,28 @@
########################################################
# T-Pot Community Edition #
# Honeytrap upstart script #
# #
# v0.50 by mo, DTAG, 2015-01-27 #
########################################################
description "Honeytrap"
author "mo"
start on started docker and filesystem
stop on runlevel [!2345]
respawn
pre-start script
# Remove any existing honeytrap containers
myCID=$(docker ps -a | grep honeytrap | awk '{ print $1 }')
if [ "$myCID" != "" ];
then docker rm $myCID;
fi
/sbin/iptables -w -A INPUT -p tcp --syn -m state --state NEW -m multiport ! --dports 21,22,42,80,135,443,445,1433,3306,5060,5061,64295,64296 -j NFQUEUE
end script
script
# Delayed start to avoid rapid respawning
sleep $(((RANDOM % 5)+5))
/usr/bin/docker run --name honeytrap --cap-add=NET_ADMIN --net=host --rm=true -v /data/honeytrap dtagdevsec/honeytrap
end script
post-stop script
/sbin/iptables -w -D INPUT -p tcp --syn -m state --state NEW -m multiport ! --dports 21,22,42,80,135,443,445,1433,3306,5060,5061,64295,64296 -j NFQUEUE
end script