diff --git a/src/warden-server/etc/warden-apache.conf.tmpl b/src/warden-server/etc/warden-apache.conf.tmpl new file mode 100644 index 0000000000000000000000000000000000000000..f1944f76f05575a997d809258afc5501150ad67e --- /dev/null +++ b/src/warden-server/etc/warden-apache.conf.tmpl @@ -0,0 +1,25 @@ +# +# +# warden-apache.conf - configuration file for the Apache server +# + +SSLEngine on + +SSLVerifyDepth 3 +SSLVerifyClient require +SSLOptions +StdEnvVars +ExportCertData + +SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL + +SSLCertificateFile _CERT_ +SSLCertificateKeyFile _KEY_ +SSLCACertificateFile _CA_FILE_ + +PerlOptions +Parent +PerlSwitches -I _LIB_ + +<Location /Warden> + SetHandler perl-script + PerlHandler Warden::ApacheDispatch + SSLOptions +StdEnvVars +</Location> diff --git a/src/warden-server/etc/warden-server.conf.tmpl b/src/warden-server/etc/warden-server.conf.tmpl new file mode 100644 index 0000000000000000000000000000000000000000..9207a51ceacde92ec231efc330f90c883c941deb --- /dev/null +++ b/src/warden-server/etc/warden-server.conf.tmpl @@ -0,0 +1,57 @@ +# +# warden-server.conf - configuration file for Warden server +# + +#------------------------------------------------------------------------------- +# BASEDIR - base directory of Warden server +#------------------------------------------------------------------------------- +$BASEDIR = "_BASEDIR_"; + +#------------------------------------------------------------------------------- +# SYSLOG - enable/disable syslog logging +#------------------------------------------------------------------------------- +$SYSLOG = 1; + +#------------------------------------------------------------------------------- +# SYSLOG_VERBOSE - enable/disable logging in verbose mode (stack info added) +#------------------------------------------------------------------------------- +$SYSLOG_VERBOSE = 1; + +#------------------------------------------------------------------------------- +# SYSLOG_FACILITY - syslog facility +#------------------------------------------------------------------------------- +$SYSLOG_FACILITY = "local7"; + +#------------------------------------------------------------------------------- +# DB_NAME - MySQL database name of Warden server +#------------------------------------------------------------------------------- +$DB_NAME = "warden"; + +#------------------------------------------------------------------------------- +# DB_USER - MySQL database user of Warden server +#------------------------------------------------------------------------------- +$DB_USER = "root"; + +#------------------------------------------------------------------------------- +# DB_PASS - MySQL database password of Warden server +#------------------------------------------------------------------------------- +$DB_PASS = ""; + +#------------------------------------------------------------------------------- +# DB_HOST - MySQL database host +#------------------------------------------------------------------------------- +$DB_HOST = "localhost"; + +#------------------------------------------------------------------------------- +# MAX_EVENTS_LIMIT - server limit of maximum number of events that can be +# delivered to one client in one batch +#------------------------------------------------------------------------------- +$MAX_EVENTS_LIMIT = 1000000; + +#------------------------------------------------------------------------------- +# VALID_STRINGS - validation hash containing allowed event attributes +#------------------------------------------------------------------------------- +%VALID_STRINGS = ( + "type" => ["portscan", "bruteforce", "probe", "spam", "phishing", "botnet_c_c", "dos", "malware", "copyright", "webattack", "test", "other", "_any_"], + "source_type" => ["IP", "URL", "Reply-To:"] +);