[Honeywall] RE: SEBEK SERVER & TRIPWIRE Configuration

Dan Kay ctk11 at hotmail.com
Wed Jul 30 19:49:41 EDT 2008


1. Line by line command to configure Tripwire is welcome from anyone who has configured and use server tripwire on the honeyall roo before.
 
2. How do you configure the fencelist as i have some production systems to protect.  (step by step guide please).
 
3. Please find below my config file as requested.  Any suggestion(s) will be welcomed.  I need to make it simple, workable and safe.
Thanks as always.
 
 HwHOSTNAME=localhost HwLAN_BCAST_ADDRESS=10.10.10.255 HwSENSOR_ID= HwUDPRATE=10 HwSEBEK_DST_IP=10.10.10.253 HwALERT=yes HwROACHMOTEL_ENABLE=no HwRULE_DAY=sat HwINET_IFACE=eth0 HwQUEUE=yes HwMANAGE_NETMASK=255.255.255.0 HwTIME_SVR= HwSEBEK_DST_PORT=1101 HwSEBEK_LOG=yes HwHWPARMOPTS= HwSCALE=day HwFWFENCE=/etc/fencelist.txt HwALLOWED_TCP_IN=443 HwNICMODLIST= HwMANAGE_IP=192.168.1.10 HwFWBLACK=/etc/blacklist.txt HwHONEYWALL_RUN=yes HwSSHD_PORT=22 HwBPF_DISABLE=no HwLAN_IFACE=eth1 HwMANAGE_GATEWAY=192.168.1.1 HwRULE_ENABLE=no HwDOMAIN=localdomain HwMANAGE_IFACE=eth2 HwICMPRATE=10 HwDNS_SVRS=194.73.73.172 194.73.73.173 HwALERT_EMAIL= HwOTHERRATE=10 HwMANAGE_DNS=194.73.73.172 194.73.73.173 HwFWWHITE= HwOINKCODE= HwPCAPDAYS=45 HwRESTRICT=yes HwSNORT_RESTART=no HwMANAGE_STARTUP=yes HwDBDAYS=180
_________________________________________________________________
Play and win great prizes with Live Search and Kung Fu Panda
http://clk.atdmt.com/UKM/go/101719966/direct/01/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://public.honeynet.org/pipermail/honeywall/attachments/20080731/a34edde4/attachment.html


More information about the Honeywall mailing list