Version information
This version is compatible with:
- Puppet Enterprise 2019.8.x, 2019.7.x, 2019.5.x, 2019.4.x, 2019.3.x, 2019.2.x
- Puppet >= 6.10.0 < 7.0.0
Start using this module
Add this module to your Puppetfile:
mod 'mcenturion-mhn_dionaea', '0.1.0'
Learn more about managing modules with a PuppetfileDocumentation
mhn_dionaea
Table of Contents
- Description
- Beginning with mhn_dionaea
- Usage - Configuration options and additional functionality
- Limitations - OS compatibility, etc.
- Development - Guide for contributing to the module
Description
A module to add a dionaea honeypot
Beginning with mhn_dionaea
mhn_dionaea{'dionaea':
hpf_server => 'mhn.local',
hpf_id => '91ded218-eaec-11e9-954a-000c299b8253',
hpf_secret => 'LId9U19VHuQOUnTU',
}
Usage
In addition to the hpf_server
, hpf_id
and hpf_secret
, you can
also set the hpf_port
:
mhn_dionaea{'dionaea':
hpf_server => 'mhn.local',
hpf_id => '91ded218-eaec-11e9-954a-000c299b8253',
hpf_secret => 'LId9U19VHuQOUnTU',
hpf_port => 2187,
}
By default, the mhn_dionaea resource only enables the ftp
, smb
and
http
services. You can enable any of the available services simply
by passing an array of those you want enabled. Note that any service
not declared will be disabled.
mhn_dionaea{'dionaea':
hpf_server => 'mhn.local',
hpf_id => '91ded218-eaec-11e9-954a-000c299b8253',
hpf_secret => 'LId9U19VHuQOUnTU',
services => ['memcache','mongo','mssql'],
}
Reference
mhn_dionaea
Parameters
hpf_server
The HPFeeds server, in the intended use-case this will be the MHN server.
hpf_port
The port where your HPF server accepts reports.
Defaults to 10000
hpf_id
The UUID that this honeypot will report as to the HPF server.
hpf_secret
The secret that this honeypot will use to communicate with the HPF server.
services
An array containing all the services that will be enabled. Its type is
Array[Enum['blackhole','ftp','memcache','mongo','mssql','pptp','smb','upnp','epmap','http','mirror','mqtt','mysql','sip','tftp']]
Limitations
mhn_dionaea
can't manage the firewall to enable ports for either the
blackhole
or mirror
services. If you want to use those, you have
to enable the required ports elsewhere.
This module is only tested con CentOS7. It might work on other RHEL7 based distros but there are no warranties.
Development
Any contributions are welcome in the form of Pull Requests on the main github repo.
Dependencies
- proletaryo-supervisor (>= 0.5.5 < 1.0.0)
- puppetlabs-stdlib (>= 6.1.0 < 7.0.0)
- puppetlabs-vcsrepo (>= 3.0.0 < 4.0.0)
- puppet-python (>= 3.0.1 < 4.0.0)
- crayfishx-firewalld (>= 3.4.0 < 3.5.0)