Skip to content
Snippets Groups Projects
Commit 07d8a83f authored by Tomáš Plesník's avatar Tomáš Plesník
Browse files

README pro warden-server-2.1 (chyby doplnit Update section, pridat data...

README pro warden-server-2.1 (chyby doplnit Update section, pridat data vydani, kontrola volani install.sh a uninstall.sh)
parent 797cda26
No related branches found
No related tags found
No related merge requests found
...@@ -7,9 +7,11 @@ Content ...@@ -7,9 +7,11 @@ Content
A. Overall Information A. Overall Information
B. Installation Dependencies B. Installation Dependencies
C. Installation C. Installation
D. Miscellaneous D. Update
E. Registration of Clients E. Uninstallation
F. Status Info F. Miscellaneous
G. Registration of Clients
H. Status Info
-------------------------------------------------------------------------------- --------------------------------------------------------------------------------
A. Overall Information A. Overall Information
...@@ -56,6 +58,7 @@ A. Overall Information ...@@ -56,6 +58,7 @@ A. Overall Information
ApacheDispatch.pm ApacheDispatch.pm
uninstall.sh uninstall.sh
-------------------------------------------------------------------------------- --------------------------------------------------------------------------------
B. Installation Dependencies B. Installation Dependencies
...@@ -78,9 +81,11 @@ B. Installation Dependencies ...@@ -78,9 +81,11 @@ B. Installation Dependencies
DateTime >= 0.61 DateTime >= 0.61
Getopt::Std >= 1.06 Getopt::Std >= 1.06
Switch >= 2.14 Switch >= 2.14
IO::Socket::SSL >= 1.74 IO::Socket::SSL >= 1.66
MIME::Base64 >= 3.08 MIME::Base64 >= 3.08
Crypt::X509 >= 0.40 Crypt::X509 >= 0.40
Carp >= 1.11
-------------------------------------------------------------------------------- --------------------------------------------------------------------------------
C. Installation C. Installation
...@@ -95,10 +100,23 @@ C. Installation ...@@ -95,10 +100,23 @@ C. Installation
3. Run install.sh. 3. Run install.sh.
Default destination directory is /opt/warden-server/ Default installation directory is /opt/warden-server/
For more information about install.sh options run install.sh -h For more information about install.sh options run install.sh -h
Usage: $ ./install.sh [-d <directory>] [-k <ssl_key_file>]
[-c <ssl_cert_file>] [-a <ssl_ca_file>] [-hV]"
-d <directory> installation directory (default: /opt)
-k <ssl_key_file> SSL certificate key file path
-c <ssl_cert_file> SSL certificate file path
-a <ssl_ca_file> CA certificate file path
-h print this help
-V print script version number and exit
Example: # ./install.sh -d /opt -k /etc/ssl/private/server.key
-c /etc/ssl/certs/server.pem
-a /etc/ssl/certs/bundle.pem
You must be root for running this script. You must be root for running this script.
4. Configuration files 4. Configuration files
...@@ -136,17 +154,18 @@ C. Installation ...@@ -136,17 +154,18 @@ C. Installation
SSL_CA_FILE - path to a CA file SSL_CA_FILE - path to a CA file
e.g. '/etc/ssl/certs/tcs-ca-bundle.pem' e.g. '/etc/ssl/certs/tcs-ca-bundle.pem'
b) warden-server.conf
b) warden-server.conf:
The Warden server configuration file contains: The Warden server configuration file contains:
BASEDIR - base directory of the Warden server BASEDIR - base directory of the Warden server
e.g. /opt/warden-server/ e.g. /opt/warden-server/
SYSLOG - enable/disable logging via syslog SYSLOG - enable/disable syslog logging
e.g. 1 e.g. 1
SYSLOG_VERBOSE - enable/disable verbose mode (stack information added) SYSLOG_VERBOSE - enable/disable logging in verbose mode (stack info added)
e.g. 1 e.g. 1
SYSLOG_FACILITY - syslog facility SYSLOG_FACILITY - syslog facility
...@@ -163,13 +182,22 @@ C. Installation ...@@ -163,13 +182,22 @@ C. Installation
DB_HOST - MySQL database host DB_HOST - MySQL database host
e.g. localhost e.g. localhost
MAX_EVENTS_LIMIT - maximum number of events that can be downloaded from Warden server MAX_EVENTS_LIMIT - server limit of maximum number of events that can be
in a single getNewEvents client function call delivered to one client in one batch
e.g. 2000000 e.g. 1000000
VALID_STRINGS - validation hash containing allowed event attributes
e.g.
%VALID_STRINGS = (
'type' => ['portscan', 'bruteforce', 'probe', 'spam', 'phishing', 'botnet_c_c', 'dos', 'malware', 'copyright', 'webattack', 'test', 'other'],
'source_type' => ['IP', 'URL', 'Reply-To:']
);
c) warden-apache.conf c) warden-apache.conf
The Apache2 configuration file for Warden server The Apache2 configuration file for Warden server:
SSLEngine on SSLEngine on
...@@ -193,22 +221,18 @@ C. Installation ...@@ -193,22 +221,18 @@ C. Installation
</Location> </Location>
5. Usage of install.sh --------------------------------------------------------------------------------
D. Update
Usage: $ ./install.sh [-d <directory>] [-k <ssl_key_file>] --------------------------------------------------------------------------------
[-c <ssl_cert_file>] [-a <ssl_ca_file>] [-hV]" E. Uninstallation
-d <directory> installation directory (default: /opt)
-k <ssl_key_file> SSL certificate key file path
-c <ssl_cert_file> SSL certificate file path
-a <ssl_ca_file> CA certificate file path
-h print this help
-V print script version number and exit
Example: $ ./install.sh -d /opt -k /etc/ssl/private/server.key
-c /etc/ssl/certs/server.pem
-a /etc/ssl/certs/bundle.pem
6. Usage of uninstall.sh For uninstallation of the Warden server package from local machine use uninstall.sh.
Default uninstallation directory is /opt/warden-server/.
For more information about uninstall.sh options run uninstall.sh -h
Usage: $ ./uninstall.sh [-d <directory>] [-hV] Usage: $ ./uninstall.sh [-d <directory>] [-hV]
-d <directory> uninstallation directory (default: /opt) -d <directory> uninstallation directory (default: /opt)
...@@ -216,9 +240,12 @@ C. Installation ...@@ -216,9 +240,12 @@ C. Installation
-V print script version number and exit -V print script version number and exit
Example: # ./uninstall.sh -d /opt Example: # ./uninstall.sh -d /opt
You must be root for running this script.
-------------------------------------------------------------------------------- --------------------------------------------------------------------------------
D. Miscellaneous F. Miscellaneous
1. Error Messages 1. Error Messages
...@@ -227,7 +254,7 @@ D. Miscellaneous ...@@ -227,7 +254,7 @@ D. Miscellaneous
2. Firewall Settings 2. Firewall Settings
Make sure that the TCP port listed in /etc/apache2/sites-enables/default Make sure that the TCP port listed in /etc/apache2/sites-enables/default(-ssl)
is allowed on your firewall. is allowed on your firewall.
3. Privileges 3. Privileges
...@@ -239,7 +266,7 @@ D. Miscellaneous ...@@ -239,7 +266,7 @@ D. Miscellaneous
No issues are known. No issues are known.
-------------------------------------------------------------------------------- --------------------------------------------------------------------------------
E. Registration of Clients G. Registration of Clients
The Warden server administrator is responsible for registering new clients or The Warden server administrator is responsible for registering new clients or
removing those already registered. Both registration or unregistration scripts removing those already registered. Both registration or unregistration scripts
...@@ -303,7 +330,7 @@ E. Registration of Clients ...@@ -303,7 +330,7 @@ E. Registration of Clients
deleted, they are merely set 'invalid' in DB table events. deleted, they are merely set 'invalid' in DB table events.
-------------------------------------------------------------------------------- --------------------------------------------------------------------------------
F. Status Info H. Status Info
Functions in this section show status of the Warden server and active Functions in this section show status of the Warden server and active
(registered) clients to the Warden system administrator. (registered) clients to the Warden system administrator.
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment