openvz实现的honeypot

Operating System:
• CentOS 5.4
Partitioning – 100GB hard drive
• / (system and scripts): 47Gb
• /vz (OpenVZ hosts): 50GB
IP Configuration
• eth0: Honeypots 10.0.1.[1-5]/16
• eth1: Management 10.1.1.[1-5]/16
• Default Gateway: 10.0.0.2
• DNS Server: 210.33.88.1
Administrator Account
• Login: root
• Password: admin123
OpenVZ Setup
1. Install OpenVZ:
yum install vzquota vzctl
2. Download the following OVZ Kernel:
http://download.openvz.org/kernel/branches/rhel5-2.6.18/028stab068.9/ovzkernel-2.6.18-164.15.1.el5.028stab068.9.i686.rpm
3. Install the OVZ Kernel
rpm –ivh ovzkernel-2.6.18-164.15.1.el5.028stab068.9.i686.rpm
4. Modify GRUB to make sure to boot the right kernel
OpenVZ Template
1. Download and copy in /vz/template/cache the template file fedora-12-x86.tar.gz:
http://download.openvz.org/template/precreated/unsupported/fedora-12-x86.tar.gz
To modify OpenVZ Template:
• Tar zxvf fedora-12-x86.tar.gz
• Modify filesystem…
• tar –numeric-owner –zcvf fedora-12-x86.tar.gz
• Place new file in /vz/template/cache
Sysctl (/etc/sysctl.conf)
• net.ipv4.ip_forward = 1
• net.ipv4.conf.default.proxy_arp = 0
• net.ipv4.conf.default.send_redirects = 1
• net.ipv4.conf.all.send_redirects = 0
• net.ipv4.icmp_echo_ignore_broadcasts = 1
• net.ipv4.conf.default.forwarding = 1
• kernel.panic = 1
Sebek
1. Untar archive , run sbk_install.sh and make sure to run it at boot
Sbk_install.sh contains the Sebek Server IP, MAC addresses and source/destination ports.
Scripts
• revert: Stop, back up and re-create honeypots. Sebek has to be disabled before!
• traffic_control: Apply traffic limitation on eth0
• install_ssh_key: Called during the honeypot deployment phase. Install the SSH keys to allow public key
Authentication from the Gateway to the honeypot. Used for the first session only.
o Copy authorized_keys in the honeypot’s user directory
• install_banner: Install the SSH banner to the honeypot. Called during the honeypot deployment phase.
o Copy one of the banner from ./banner directory to /etc/motd of the honeypot. Banner filename is the
honeypot type.
Crontab
## Every hour, update time with collector
0 * * * * /usr/sbin/ntpdate 10.1.0.1 2>&1
Autostart program
# Start Sebek Client
cd /cybercrime/sebek
./sbk_install.sh
# Start Traffic Contr

openvz实现的honeypot相关推荐

在Raspberry Pi上安装DShield Honeypot
A lightweight honeypot that contributes threat intelligence data to SANS Internet Storm Center (ISC) ...
java 容器限制大小,容器中的Java与内存限制：LXC、Docker与OpenVZ
开发者在使用JVM.内存与Docker时是否遭遇到难题?今天我们将一同利用Jelastic将其解决.最近Matt Willaims提起的Docker内Java及其内存限制的议题得到了广泛关注,而这些在 ...
OpenVZ，Xen，KVM等：虚拟化解决方案
Table of Contents OpenVZ 技术原理功能特点参考资料 KVM 简介特点种类相关链接 Xen.OpenVZ.KVM三大VPS技术优劣势详解.VPS虚拟服务器是虚拟技术的产 ...
基于KVM、Xen、OpenVZ等虚拟化技术的WEB在线管理工具
KVM能基于WEB管理吧?有没有开源的?基于WEB创建,修改,动态迁移 https://blog.csdn.net/enweitech/article/details/51668952 能够管理KVM ...
OpenVZ平台魔改BBR之Rinetd
1.Debian or Ubuntu系统 #适用于单网卡(单IP)服务器: wget https://github.com/tcp-nanqinlang/lkl-rinetd/releases/dow ...
Xen、OpenVZ、KVM、Hyper-V、VMWare虚拟化技术介绍
已经迁移:https://www.heguo.org/blog/myweishanli/article/389 国内外vps主机提供商所提供的主机大多是基于Xen.OpenVZ.KVM.Hyper-V ...
OpenVZ虚拟机安装过程详解
转自:OpenVZ虚拟机安装过程详解鼎鼎大名的 OpenVZ 谁不知道?在主机行业被使用(滥用)很多年,依然在茁壮发展.作为一种操作系统级别的虚拟化技术,运行 OpenVZ 没有硬性的硬件要求.Op ...
openvz使用手册
一.openvz相关资料 openvz官网: https://wiki.openvz.org/Main_Page openvz7链接: https://wiki.openvz.org/News/upd ...
【云计算与大数据技术】虚拟化技术、开源技术Xen、KVM、OpenVZ的讲解（图文解释超详细）
一.系统虚拟化系统虚拟化的核心思想是使用虚拟化软件在一台物理机上,虚拟出一台或多台虚拟机.步骤如下利用虚拟化评估工具进行容量规划,实现同平台应用的资源整合: 首先采用容量规划工具决定每个系统的配置 ...

openvz实现的honeypot

openvz实现的honeypot相关推荐

最新文章

热门文章