Rooba
/
cowrie
mirror of https://github.com/cowrie/cowrie.git
1
1
Fork 0
Code Issues Packages Projects Releases Wiki Activity

authbind docs

This commit is contained in:
Michel Oosterhof 2016-01-17 10:32:35 +04:00
parent 02f989e22a
commit c45caf7f37
2 changed files with 20 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
INSTALL.md
View File

@ -2,7 +2,7 @@
Installing cowrie in six easy steps. Installing cowrie in six easy steps.
It's recommended to install under a separate non-root user id: It's strongly recommended to install under a dedicated non-root user id:
``` ```
$ sudo adduser --disabled-password cowrie $ sudo adduser --disabled-password cowrie
@ -37,13 +37,24 @@ $ ./start.sh
Starting cowrie in the background... Starting cowrie in the background...
``` ```
Cowry runs by default on port 2222. This can be modified in the configuration file. Running on port 22 is not recommended. Cowry runs by default on port 2222. This can be modified in the configuration file.
The following firewall rule will forward incoming traffic on port 22 to port 2222. The following firewall rule will forward incoming traffic on port 22 to port 2222.
``` ```
$ sudo iptables -t nat -A PREROUTING -p tcp --dport 22 -j REDIRECT --to-port 2222 $ sudo iptables -t nat -A PREROUTING -p tcp --dport 22 -j REDIRECT --to-port 2222
``` ```
Alternatively you can run authbind to listen as non-root on port 22 directly:
```
$ apt-get install authbind
$ touch /etc/authbind/byport/22
$ chown cowrie:cowrie /etc/authbind/byport/22
$ chmod 777 /etc/authbind/byport/22
```
* Edit start.sh and modify the AUTHBIND_ENABLED setting
* Change listen_port to 22 in cowrie.cfg
# Bugs and workarounds # Bugs and workarounds

8
start.sh
View File

@ -1,4 +1,5 @@
#!/bin/sh #!/bin/sh
AUTHBIND_ENABLED=no
set -e set -e
@ -25,4 +26,9 @@ then
fi fi
echo "Starting cowrie in the background..." echo "Starting cowrie in the background..."
twistd -l log/cowrie.log --pidfile cowrie.pid cowrie if [ $AUTHBIND_ENABLED == "no" ]
then
twistd -l log/cowrie.log --pidfile cowrie.pid cowrie
else
authbind --deep twistd -l log/cowrie.log --pidfile cowrie.pid cowrie
fi