From a00a534f25a63fda5b4186a5f9a8a37da25efc6b Mon Sep 17 00:00:00 2001 From: Tomas Plesnik <plesnik@ics.muni.cz> Date: Fri, 27 Sep 2013 18:33:28 +0200 Subject: [PATCH] sabona pro konfiguracni soubor warden-apache.conf a warden-server.conf --- src/warden-server/etc/warden-apache.conf.tmpl | 25 ++++++++ src/warden-server/etc/warden-server.conf.tmpl | 57 +++++++++++++++++++ 2 files changed, 82 insertions(+) create mode 100644 src/warden-server/etc/warden-apache.conf.tmpl create mode 100644 src/warden-server/etc/warden-server.conf.tmpl diff --git a/src/warden-server/etc/warden-apache.conf.tmpl b/src/warden-server/etc/warden-apache.conf.tmpl new file mode 100644 index 0000000..f1944f7 --- /dev/null +++ b/src/warden-server/etc/warden-apache.conf.tmpl @@ -0,0 +1,25 @@ +# +# +# warden-apache.conf - configuration file for the Apache server +# + +SSLEngine on + +SSLVerifyDepth 3 +SSLVerifyClient require +SSLOptions +StdEnvVars +ExportCertData + +SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL + +SSLCertificateFile _CERT_ +SSLCertificateKeyFile _KEY_ +SSLCACertificateFile _CA_FILE_ + +PerlOptions +Parent +PerlSwitches -I _LIB_ + +<Location /Warden> + SetHandler perl-script + PerlHandler Warden::ApacheDispatch + SSLOptions +StdEnvVars +</Location> diff --git a/src/warden-server/etc/warden-server.conf.tmpl b/src/warden-server/etc/warden-server.conf.tmpl new file mode 100644 index 0000000..9207a51 --- /dev/null +++ b/src/warden-server/etc/warden-server.conf.tmpl @@ -0,0 +1,57 @@ +# +# warden-server.conf - configuration file for Warden server +# + +#------------------------------------------------------------------------------- +# BASEDIR - base directory of Warden server +#------------------------------------------------------------------------------- +$BASEDIR = "_BASEDIR_"; + +#------------------------------------------------------------------------------- +# SYSLOG - enable/disable syslog logging +#------------------------------------------------------------------------------- +$SYSLOG = 1; + +#------------------------------------------------------------------------------- +# SYSLOG_VERBOSE - enable/disable logging in verbose mode (stack info added) +#------------------------------------------------------------------------------- +$SYSLOG_VERBOSE = 1; + +#------------------------------------------------------------------------------- +# SYSLOG_FACILITY - syslog facility +#------------------------------------------------------------------------------- +$SYSLOG_FACILITY = "local7"; + +#------------------------------------------------------------------------------- +# DB_NAME - MySQL database name of Warden server +#------------------------------------------------------------------------------- +$DB_NAME = "warden"; + +#------------------------------------------------------------------------------- +# DB_USER - MySQL database user of Warden server +#------------------------------------------------------------------------------- +$DB_USER = "root"; + +#------------------------------------------------------------------------------- +# DB_PASS - MySQL database password of Warden server +#------------------------------------------------------------------------------- +$DB_PASS = ""; + +#------------------------------------------------------------------------------- +# DB_HOST - MySQL database host +#------------------------------------------------------------------------------- +$DB_HOST = "localhost"; + +#------------------------------------------------------------------------------- +# MAX_EVENTS_LIMIT - server limit of maximum number of events that can be +# delivered to one client in one batch +#------------------------------------------------------------------------------- +$MAX_EVENTS_LIMIT = 1000000; + +#------------------------------------------------------------------------------- +# VALID_STRINGS - validation hash containing allowed event attributes +#------------------------------------------------------------------------------- +%VALID_STRINGS = ( + "type" => ["portscan", "bruteforce", "probe", "spam", "phishing", "botnet_c_c", "dos", "malware", "copyright", "webattack", "test", "other", "_any_"], + "source_type" => ["IP", "URL", "Reply-To:"] +); -- GitLab