tweaking, add new honeypot

correct a typo in CONTRIBUTING.MD
preapre for and add mailoney honeypot
This commit is contained in:
Marco Ochse
2017-06-15 22:08:56 +00:00
parent a1bc127698
commit 77e68f0e64
8 changed files with 52 additions and 5 deletions

View File

@ -10,6 +10,7 @@ networks:
emobility_local:
ewsposter_local:
glastopf_local:
mailoney_local:
spiderfoot_local:
ui-for-docker_local:
@ -195,6 +196,18 @@ services:
volumes:
- /data/honeytrap:/data/honeytrap
- /data/ews:/data/ews
# Mailoney service
mailoney:
container_name: mailoney
restart: always
networks:
- mailoney_local
ports:
- "25:2525"
image: "dtagdevsec/mailoney:1706"
volumes:
- /data/mailoney/log:/opt/mailoney/logs
# Netdata service
netdata:

View File

@ -8,6 +8,7 @@ networks:
elasticpot_local:
ewsposter_local:
glastopf_local:
mailoney_local:
services:
@ -103,3 +104,15 @@ services:
volumes:
- /data/honeytrap:/data/honeytrap
- /data/ews:/data/ews
# Mailoney service
mailoney:
container_name: mailoney
restart: always
networks:
- mailoney_local
ports:
- "25:2525"
image: "dtagdevsec/mailoney:1706"
volumes:
- /data/mailoney/log:/opt/mailoney/logs

View File

@ -97,7 +97,6 @@ services:
image: "dtagdevsec/emobility:1706"
volumes:
- /data/emobility:/data/eMobility
- /data/ews:/data/ews
# Ewsposter service
ewsposter:

View File

@ -8,6 +8,7 @@ networks:
elasticpot_local:
ewsposter_local:
glastopf_local:
mailoney_local:
spiderfoot_local:
ui-for-docker_local:
@ -166,6 +167,18 @@ services:
- /data/honeytrap:/data/honeytrap
- /data/ews:/data/ews
# Mailoney service
mailoney:
container_name: mailoney
restart: always
networks:
- mailoney_local
ports:
- "25:2525"
image: "dtagdevsec/mailoney:1706"
volumes:
- /data/mailoney/log:/opt/mailoney/logs
# Netdata service
netdata:
container_name: netdata

View File

@ -33,7 +33,7 @@ ExecStartPre=-/bin/chmod 666 /var/run/docker.sock
ExecStartPre=/sbin/iptables -w -A INPUT -s 127.0.0.1 -j ACCEPT
ExecStartPre=/sbin/iptables -w -A INPUT -d 127.0.0.1 -j ACCEPT
ExecStartPre=/sbin/iptables -w -A INPUT -p tcp -m multiport --dports 64295:64303,7634,8125 -j ACCEPT
ExecStartPre=/sbin/iptables -w -A INPUT -p tcp -m multiport --dports 21,22,23,42,69,80,135,443,445,1433,1723,1883,1900 -j ACCEPT
ExecStartPre=/sbin/iptables -w -A INPUT -p tcp -m multiport --dports 21:23,25,42,69,80,135,443,445,1433,1723,1883,1900 -j ACCEPT
ExecStartPre=/sbin/iptables -w -A INPUT -p tcp -m multiport --dports 3306,5060,5061,5601,11211 -j ACCEPT
ExecStartPre=/sbin/iptables -w -A INPUT -p tcp -m multiport --dports 1025,50100,8080,8081,9200 -j ACCEPT
ExecStartPre=/sbin/iptables -w -A INPUT -p tcp --syn -m state --state NEW -j NFQUEUE
@ -48,7 +48,7 @@ ExecStop=/usr/local/bin/docker-compose -f /etc/tpot/tpot.yml down -v
ExecStopPost=/sbin/iptables -w -D INPUT -s 127.0.0.1 -j ACCEPT
ExecStopPost=/sbin/iptables -w -D INPUT -d 127.0.0.1 -j ACCEPT
ExecStopPost=/sbin/iptables -w -D INPUT -p tcp -m multiport --dports 64295:64303,7634,8125 -j ACCEPT
ExecStopPost=/sbin/iptables -w -D INPUT -p tcp -m multiport --dports 21,22,23,42,69,80,135,443,445,1433,1723,1883,1900 -j ACCEPT
ExecStopPost=/sbin/iptables -w -D INPUT -p tcp -m multiport --dports 21:23,25,42,69,80,135,443,445,1433,1723,1883,1900 -j ACCEPT
ExecStopPost=/sbin/iptables -w -D INPUT -p tcp -m multiport --dports 3306,5060,5061,5601,11211 -j ACCEPT
ExecStopPost=/sbin/iptables -w -D INPUT -p tcp -m multiport --dports 1025,50100,8080,8081,9200 -j ACCEPT
ExecStopPost=/sbin/iptables -w -D INPUT -p tcp --syn -m state --state NEW -j NFQUEUE