From 7872f5abbaeca4f0ae5bd8fbb487dea167dca52d Mon Sep 17 00:00:00 2001 From: Alexander Kloster <22755371+klosnet@users.noreply.github.com> Date: Wed, 28 Nov 2018 02:10:35 -0600 Subject: [PATCH 001/121] Update generic-virtualbox.json adding "evil" honeypot option, based off debian8 --- generic-virtualbox.json | 55 +++++++++++++++++++++++++++++++++++++++++ 1 file changed, 55 insertions(+) diff --git a/generic-virtualbox.json b/generic-virtualbox.json index cc047a632..2f79ce075 100644 --- a/generic-virtualbox.json +++ b/generic-virtualbox.json @@ -393,6 +393,61 @@ "generic-debian8-virtualbox" ] }, + + + + + + + + + + + + + + + + { + "scripts": [ + "scripts/evil/network.sh", + "scripts/evil/apt.sh" + ], + "type": "shell", + "start_retry_timeout": "15m", + "expect_disconnect": "true", + "only": [ + "generic-evil-virtualbox" + ] + }, + { + "scripts": [ + "scripts/evil/floppy.sh", + "scripts/evil/profile.sh", + "scripts/evil/vagrant.sh", + "scripts/evil/motd.sh", + "scripts/evil/fixtty.sh", + "scripts/evil/virtualbox.sh", + "scripts/evil/parallels.sh", + "scripts/evil/vmware.sh", + "scripts/evil/honeypot.sh" + "scripts/evil/qemu.sh" + ], + "type": "shell", + "pause_before": "120s", + "start_retry_timeout": "15m", + "expect_disconnect": "true", + "only": [ + "generic-evil-virtualbox" + ] + }, + + + + + + + { "scripts": [ "scripts/debian9/network.sh", From fdfa1ab6a5a83e3d15e43dc2e4ea2c8ab3113ede Mon Sep 17 00:00:00 2001 From: Alexander Kloster <22755371+klosnet@users.noreply.github.com> Date: Wed, 28 Nov 2018 02:13:30 -0600 Subject: [PATCH 002/121] Add files via upload addings "evil" scripts --- scripts/evil/apt.sh | 47 + scripts/evil/fixtty.sh | 9 + scripts/evil/floppy.sh | 5 + scripts/evil/honeypot.sh | 1956 ++++++++++++++++++++++++++++++++++++ scripts/evil/limits.sh | 14 + scripts/evil/magma.sh | 121 +++ scripts/evil/memcached.sh | 11 + scripts/evil/motd.sh | 6 + scripts/evil/mysql.sh | 22 + scripts/evil/network.sh | 58 ++ scripts/evil/parallels.sh | 24 + scripts/evil/postfix.sh | 23 + scripts/evil/profile.sh | 79 ++ scripts/evil/qemu.sh | 23 + scripts/evil/vagrant.sh | 27 + scripts/evil/virtualbox.sh | 62 ++ scripts/evil/vmware.sh | 37 + 17 files changed, 2524 insertions(+) create mode 100644 scripts/evil/apt.sh create mode 100644 scripts/evil/fixtty.sh create mode 100644 scripts/evil/floppy.sh create mode 100644 scripts/evil/honeypot.sh create mode 100644 scripts/evil/limits.sh create mode 100644 scripts/evil/magma.sh create mode 100644 scripts/evil/memcached.sh create mode 100644 scripts/evil/motd.sh create mode 100644 scripts/evil/mysql.sh create mode 100644 scripts/evil/network.sh create mode 100644 scripts/evil/parallels.sh create mode 100644 scripts/evil/postfix.sh create mode 100644 scripts/evil/profile.sh create mode 100644 scripts/evil/qemu.sh create mode 100644 scripts/evil/vagrant.sh create mode 100644 scripts/evil/virtualbox.sh create mode 100644 scripts/evil/vmware.sh diff --git a/scripts/evil/apt.sh b/scripts/evil/apt.sh new file mode 100644 index 000000000..f9248b61b --- /dev/null +++ b/scripts/evil/apt.sh @@ -0,0 +1,47 @@ +#!/bin/bash + +error() { + if [ $? -ne 0 ]; then + printf "\n\napt failed...\n\n"; + exit 1 + fi +} + +# To allow for autmated installs, we disable interactive configuration steps. +export DEBIAN_FRONTEND=noninteractive +export DEBCONF_NONINTERACTIVE_SEEN=true + +# Disable periodic activities of apt +printf "APT::Periodic::Enable \"0\";\n" >> /etc/apt/apt.conf.d/10periodic + +# Remove the CDROM as a media source. +sed -i -e "/cdrom:/d" /etc/apt/sources.list + +# Ensure the server includes any necessary updates. +apt-get --assume-yes -o Dpkg::Options::="--force-confnew" update; error +apt-get --assume-yes -o Dpkg::Options::="--force-confnew" upgrade; error +apt-get --assume-yes -o Dpkg::Options::="--force-confnew" dist-upgrade; error + +# The packages users expect on a sane system. +apt-get --assume-yes install vim net-tools mlocate psmisc; error + +# The packages needed to compile magma. +apt-get --assume-yes install vim gcc g++ gcc-multilib make autoconf automake libtool flex bison gdb valgrind valgrind-dbg libpython2.7 libc6-dev libc++-dev libncurses5-dev libmpfr4 libmpfr-dev patch make cmake libarchive13 libbsd-dev libsubunit-dev libsubunit0 pkg-config lsb-release; error + +# The memcached server. +apt-get --assume-yes install memcached libevent-dev; error + +# The postfix server for message relays. +apt-get --assume-yes install postfix postfix-cdb libcdb1 ssl-cert; error + +# Need to retrieve the source code. +apt-get --assume-yes install git git-man liberror-perl rsync wget; error + +# Needed to run the watcher and status scripts. +apt-get --assume-yes install sysstat inotify-tools; error + +# Needed to run the stacie script. +apt-get --assume-yes install python-crypto python-cryptography; error + +# Boosts the available entropy which allows magma to start faster. +apt-get --assume-yes install haveged; error diff --git a/scripts/evil/fixtty.sh b/scripts/evil/fixtty.sh new file mode 100644 index 000000000..9a21734b9 --- /dev/null +++ b/scripts/evil/fixtty.sh @@ -0,0 +1,9 @@ +#!/bin/bash -eux + +# Fix the no tty bug with vagrant. +# https://github.com/mitchellh/vagrant/issues/1673 + +sed -i -e 's,^\(ACTIVE_CONSOLES="/dev/tty\).*,\11",' /etc/default/console-setup +for f in /etc/init/tty[^1]*.conf; do + rm --force "$f" +done diff --git a/scripts/evil/floppy.sh b/scripts/evil/floppy.sh new file mode 100644 index 000000000..ab0a6ca8f --- /dev/null +++ b/scripts/evil/floppy.sh @@ -0,0 +1,5 @@ +#!/bin/bash -eux + +printf 'blacklist floppy\n' > /etc/modprobe.d/floppy.conf +mkinitramfs -o /boot/initrd.img-$(uname -r) $(uname -r) + diff --git a/scripts/evil/honeypot.sh b/scripts/evil/honeypot.sh new file mode 100644 index 000000000..163bf8181 --- /dev/null +++ b/scripts/evil/honeypot.sh @@ -0,0 +1,1956 @@ +#!/bin/bash -eux +# To allow for automated installs, we disable interactive configuration steps. +export DEBIAN_FRONTEND=noninteractive +export DEBCONF_NONINTERACTIVE_SEEN=true +#install inetsim using debian apt packages. +apt install apt-transport-https --assume-yes +echo "deb https://www.inetsim.org/debian/ binary/" > /etc/apt/sources.list.d/inetsim.list +curl --remote-name https://www.inetsim.org/inetsim-archive-signing-key.asc +apt-key add inetsim-archive-signing-key.asc +apt update --assume-yes && apt install insetsim --assume-yes +apt install inetsim --assume-yes + +# print inetsim configuration file to inetsim.conf + +cat <> /etc/inetsim.conf + ############################################################# +# @klosnet +# INetSim configuration file +# +############################################################# + + +############################################################# +# Main configuration +############################################################# + +######################################### +# start_service +# +# The services to start +# +# Syntax: start_service +# +# Default: none +# +# Available service names are: +# dns, http, smtp, pop3, tftp, ftp, ntp, time_tcp, +# time_udp, daytime_tcp, daytime_udp, echo_tcp, +# echo_udp, discard_tcp, discard_udp, quotd_tcp, +# quotd_udp, chargen_tcp, chargen_udp, finger, +# ident, syslog, dummy_tcp, dummy_udp, smtps, pop3s, +# ftps, irc, http so +# +start_service dns +start_service http +start_service https +start_service smtp +start_service smtps +start_service pop3 +start_service pop3s +start_service ftp +start_service ftps +start_service tftp +start_service irc +start_service ntp +start_service finger +start_service ident +start_service syslog +start_service time_tcp +start_service time_udp +start_service daytime_tcp +start_service daytime_udp +start_service echo_tcp +start_service echo_udp +start_service discard_tcp +start_service discard_udp +start_service quotd_tcp +start_service quotd_udp +start_service chargen_tcp +start_service chargen_udp +start_service dummy_tcp +start_service dummy_udp + + +######################################### +# service_bind_address +# +# IP address to bind services to +# +# Syntax: service_bind_address +# +# Default: 127.0.0.1 +# +service_bind_address 0.0.0.0 + + +######################################### +# service_run_as_user +# +# User to run services +# +# Syntax: service_run_as_user +# +# Default: inetsim +# +#service_run_as_user nobody + + +######################################### +# service_max_childs +# +# Maximum number of child processes (parallel connections) +# for each service +# +# Syntax: service_max_childs [1..30] +# +# Default: 10 +# +#service_max_childs 15 + + +######################################### +# service_timeout +# +# If a client does not send any data for the number of seconds +# given here, the corresponding connection will be closed. +# +# Syntax: service_timeout [1..600] +# +# Default: 120 +# +#service_timeout 60 + + +######################################### +# create_reports +# +# Create report with a summary of connections +# for the session on shutdown +# +# Syntax: create_reports [yes|no] +# +# Default: yes +# +#create_reports no + + +######################################### +# report_language +# +# Set language for reports +# Note: Currently only languages 'en' and 'de' are supported +# +# Syntax: report_language +# +# Default: en +# +#report_language de + + +############################################################# +# Faketime +############################################################# + +######################################### +# faketime_init_delta +# +# Initial number of seconds (positive or negative) +# relative to current date/time for fake time used by all services +# +# Syntax: faketime_init_delta +# +# Default: 0 (use current date/time) +# +#faketime_init_delta 1000 + + +######################################### +# faketime_auto_delay +# +# Number of seconds to wait before incrementing fake time +# by value specified with 'faketime_auto_increment'. +# Setting to '0' disables this option. +# +# Syntax: faketime_auto_delay [0..86400] +# +# Default: 0 (disabled) +# +faketime_auto_delay 1000 + + +######################################### +# faketime_auto_increment +# +# Number of seconds by which fake time is incremented at +# regular intervals specified by 'faketime_auto_delay'. +# This option only takes effect if 'faketime_auto_delay' +# is enabled (not set to '0'). +# +# Syntax: faketime_auto_increment [-31536000..31536000] +# +# Default: 3600 +# +faketime_auto_increment 31337 + + +############################################################# +# Service DNS +############################################################# + +######################################### +# dns_bind_port +# +# Port number to bind DNS service to +# +# Syntax: dns_bind_port +# +# Default: 53 +# +#dns_bind_port 53 + + +######################################### +# dns_default_ip +# +# Default IP address to return with DNS replies +# +# Syntax: dns_default_ip +# +# Default: 127.0.0.1 +# +dns_default_ip 10.0.0.1 + + +######################################### +# dns_default_hostname +# +# Default hostname to return with DNS replies +# +# Syntax: dns_default_hostname +# +# Default: www +# +#dns_default_hostname somehost + + +######################################### +# dns_default_domainname +# +# Default domain name to return with DNS replies +# +# Syntax: dns_default_domainname +# +# Default: inetsim.org +# +#dns_default_domainname some.domain + + +######################################### +# dns_static +# +# Static mappings for DNS +# +# Syntax: dns_static +# +# Default: none +# +#dns_static www.foo.com 10.10.10.10 +#dns_static ns1.foo.com 10.70.50.30 +#dns_static ftp.bar.net 10.10.20.30 + + +######################################### +# dns_version +# +# DNS version +# +# Syntax: dns_version +# +# Default: \"INetSim DNS Server\" +# +#dns_version \"9.2.4\" + + +############################################################# +# Service HTTP +############################################################# + +######################################### +# http_bind_port +# +# Port number to bind HTTP service to +# +# Syntax: http_bind_port +# +# Default: 80 +# +#http_bind_port 80 + + +######################################### +# http_version +# +# Version string to return in HTTP replies +# +# Syntax: http_version +# +# Default: \"INetSim HTTP server\" +# +http_version \"Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.3.3 mod_ssl/2.2.15 OpenSSL/1.0.1e-fips Phusion_Passenger/4.0.59 mod_perl/2.0.4 Perl/v5.10.1\" + + + + +######################################### +# http_fakemode +# +# Turn HTTP fake mode on or off +# +# Syntax: http_fakemode [yes|no] +# +# Default: yes +# +#http_fakemode no + + +######################################### +# http_fakefile +# +# Fake files returned in fake mode based on the file extension +# in the HTTP request. +# The fake files must be placed in /http/fakefiles +# +# Syntax: http_fakefile +# +# Default: none +# +http_fakefile txt sample.txt text/plain +http_fakefile htm sample.html text/html +http_fakefile html sample.html text/html +http_fakefile php sample.html text/html +http_fakefile gif sample.gif image/gif +http_fakefile jpg sample.jpg image/jpeg +http_fakefile jpeg sample.jpg image/jpeg +http_fakefile png sample.png image/png +http_fakefile bmp sample.bmp image/x-ms-bmp +http_fakefile ico favicon.ico image/x-icon +http_fakefile exe sample_gui.exe x-msdos-program +http_fakefile com sample_gui.exe x-msdos-program + + +######################################### +# http_default_fakefile +# +# The default fake file returned in fake mode if the file extension +# in the HTTP request does not match any of the extensions +# defined above. +# +# The default fake file must be placed in /http/fakefiles +# +# Syntax: http_default_fakefile +# +# Default: none +# +http_default_fakefile sample.html text/html + + +######################################### +# http_static_fakefile +# +# Fake files returned in fake mode based on static path. +# The fake files must be placed in /http/fakefiles +# +# Syntax: http_static_fakefile +# +# Default: none +# +#http_static_fakefile /path/ sample_gui.exe x-msdos-program +#http_static_fakefile /path/to/file.exe sample_gui.exe x-msdos-program + + +############################################################# +# Service HTTPS +############################################################# + +######################################### +# https_bind_port +# +# Port number to bind HTTPS service to +# +# Syntax: https_bind_port +# +# Default: 443 +# +https_bind_port 8443 + + +######################################### +# https_version +# +# Version string to return in HTTPS replies +# +# Syntax: https_version +# +# Default: \"INetSim HTTPs server\" +# +https_version \"Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.3.3 mod_ssl/2.2.15 OpenSSL/1.0.1e-fips Phusion_Passenger/4.0.59 mod_perl/2.0.4 Perl/v5.10.1\" + + +######################################### +# https_fakemode +# +# Turn HTTPS fake mode on or off +# +# Syntax: https_fakemode [yes|no] +# +# Default: yes +# +#https_fakemode no + + +######################################### +# https_fakefile +# +# Fake files returned in fake mode based on the file extension +# in the HTTPS request. +# The fake files must be placed in /http/fakefiles +# +# Syntax: https_fakefile +# +# Default: none +# +https_fakefile txt sample.txt text/plain +https_fakefile htm sample.html text/html +https_fakefile html sample.html text/html +https_fakefile php sample.html text/html +https_fakefile gif sample.gif image/gif +https_fakefile jpg sample.jpg image/jpeg +https_fakefile jpeg sample.jpg image/jpeg +https_fakefile png sample.png image/png +https_fakefile bmp sample.bmp image/x-ms-bmp +https_fakefile ico favicon.ico image/x-icon +https_fakefile exe sample_gui.exe x-msdos-program +https_fakefile com sample_gui.exe x-msdos-program + + +######################################### +# https_default_fakefile +# +# The default fake file returned in fake mode if the file extension +# in the HTTPS request does not match any of the extensions +# defined above. +# +# The default fake file must be placed in /http/fakefiles +# +# Syntax: https_default_fakefile +# +# Default: none +# +https_default_fakefile sample.html text/html + + +######################################### +# https_static_fakefile +# +# Fake files returned in fake mode based on static path. +# The fake files must be placed in /http/fakefiles +# +# Syntax: https_static_fakefile +# +# Default: none +# +#https_static_fakefile /path/ sample_gui.exe x-msdos-program +#https_static_fakefile /path/to/file.exe sample_gui.exe x-msdos-program + + +######################################### +# https_ssl_keyfile +# +# Name of the SSL private key PEM file. +# The key MUST NOT be encrypted! +# +# The file must be placed in /certs/ +# +# Syntax: https_ssl_keyfile +# +# Default: default_key.pem +# +#https_ssl_keyfile https_key.pem + + +######################################### +# https_ssl_certfile +# +# Name of the SSL certificate file. +# +# The file must be placed in /certs/ +# +# Syntax: https_ssl_certfile +# +# Default: default_cert.pem +# +#https_ssl_certfile https_cert.pem + + +######################################### +# https_ssl_dhfile +# +# Name of the Diffie-Hellman parameter PEM file. +# +# The file must be placed in /certs/ +# +# Syntax: https_ssl_dhfile +# +# Default: none +# +#https_ssl_dhfile https_dh1024.pem + + +############################################################# +# Service SMTP +############################################################# + +######################################### +# smtp_bind_port +# +# Port number to bind SMTP service to +# +# Syntax: smtp_bind_port +# +# Default: 25 +# +#smtp_bind_port 25 + + +######################################### +# smtp_fqdn_hostname +# +# The FQDN hostname used for SMTP +# +# Syntax: smtp_fqdn_hostname +# +# Default: mail.inetsim.org +smtp_fqdn_hostname lavabit.com +#smtp_fqdn + + + +######################################### +# smtp_banner +# +# The banner string used in SMTP greeting message +# +# Syntax: smtp_banner +# +# Default: \"INetSim Mail Service ready.\" +# +smtp_banner \"220 Magma SMTP Mailer ready.\" + + +######################################### +# smtp_helo_required +# +# Client has to send HELO/EHLO before any other command +# +# Syntax: smtp_helo_required [yes|no] +# +# Default: no +# +#smtp_helo_required yes + + +######################################### +# smtp_extended_smtp +# +# Turn support for extended smtp (ESMTP) on or off +# +# Syntax: smtp_extended_smtp [yes|no] +# +# Default: yes +# +#smtp_extended_smtp no + + +######################################### +# smtp_service_extension +# +# SMTP service extensions offered to client. +# For more information, see +# +# +# Syntax: smtp_service_extension +# +# Supported extensions and parameters: +# VRFY +# EXPN +# HELP +# 8BITMIME +# SIZE # one optional parameter +# ENHANCEDSTATUSCODES +# AUTH # one or more of [PLAIN LOGIN ANONYMOUS CRAM-MD5 CRAM-SHA1] +# DSN +# SEND +# SAML +# SOML +# TURN +# ETRN +# ATRN +# VERP +# MTRK +# CHUNKING +# STARTTLS +# DELIVERBY # one optional parameter +# SUBMITTER +# CHECKPOINT +# BINARYMIME +# NO-SOLICITING # one optional parameter +# FUTURERELEASE # two required parameters +# +# Default: none +# +smtp_service_extension VRFY +smtp_service_extension EXPN +smtp_service_extension HELP +smtp_service_extension 8BITMIME +smtp_service_extension SIZE 102400000 +smtp_service_extension ENHANCEDSTATUSCODES +smtp_service_extension AUTH PLAIN LOGIN ANONYMOUS CRAM-MD5 CRAM-SHA1 +smtp_service_extension DSN +smtp_service_extension ETRN +smtp_service_extension STARTTLS +# + + +######################################### +# smtp_auth_reversibleonly +# +# Only offer authentication mechanisms which allow reversing +# the authentication information sent by a client +# to clear text username/password. +# This option only takes effect if 'smtp_extended_smtp' is +# enabled and 'smtp_service_extension AUTH' is configured. +# +# Syntax: smtp_auth_reversibleonly [yes|no] +# +# Default: no +# +#smtp_auth_reversibleonly yes + + +######################################### +# smtp_auth_required +# +# Force the client to authenticate. +# This option only takes effect if 'smtp_extended_smtp' is +# enabled and 'smtp_service_extension AUTH' is configured. +# +# Syntax: smtp_auth_required [yes|no] +# +# Default: no +# +#smtp_auth_required yes + + +######################################### +# smtp_ssl_keyfile +# +# Name of the SSL private key PEM file. +# The key MUST NOT be encrypted! +# +# This option only takes effect if 'smtp_extended_smtp' is +# enabled and 'smtp_service_extension STARTTLS' is configured. +# +# The file must be placed in /certs/ +# +# Note: If no key file is specified, the extension STARTTLS +# will be disabled. +# +# Syntax: smtp_ssl_keyfile +# +# Default: default_key.pem +# +#smtp_ssl_keyfile smtp_key.pem + + +######################################### +# smtp_ssl_certfile +# +# Name of the SSL certificate PEM file. +# +# This option only takes effect if 'smtp_extended_smtp' is +# enabled and 'smtp_service_extension STARTTLS' is configured. +# +# The file must be placed in /certs/ +# +# Note: If no cert file is specified, the extension STARTTLS +# will be disabled. +# +# Syntax: smtp_ssl_certfile +# +# Default: default_cert.pem +# +#smtp_ssl_certfile smtp_cert.pem + + +######################################### +# smtp_ssl_dhfile +# +# Name of the Diffie-Hellman parameter PEM file. +# +# The file must be placed in /certs/ +# +# Syntax: smtp_ssl_dhfile +# +# Default: none +# +#smtp_ssl_dhfile smtp_dh1024.pem + + + +############################################################# +# Service SMTPS +############################################################# + +######################################### +# smtps_bind_port +# +# Port number to bind SMTPS service to +# +# Syntax: smtps_bind_port +# +# Default: 465 +# +#smtps_bind_port 465 + + +######################################### +# smtps_fqdn_hostname +# +# The FQDN hostname used for SMTPS +# +# Syntax: smtps_fqdn_hostname +# +# Default: mail.inetsim.org +# +smtps_fqdn_hostname mail.lavabit.com + + +######################################### +# smtps_banner +# +# The banner string used in SMTPS greeting message +# +# Syntax: smtps_banner +# +# Default: \"INetSim Mail Service ready.\" +# +smtps_banner \"220 Magma ESMTPS ready.\" + + +######################################### +# smtps_helo_required +# +# Client has to send HELO/EHLO before any other command +# +# Syntax: smtps_helo_required [yes|no] +# +# Default: no +# +#smtps_helo_required yes + + +######################################### +# smtps_extended_smtp +# +# Turn support for extended smtp (ESMTP) on or off +# +# Syntax: smtps_extended_smtp [yes|no] +# +# Default: yes +# +#smtps_extended_smtp no + + +######################################### +# smtps_service_extension +# +# SMTP service extensions offered to client. +# For more information, see +# +# +# Syntax: smtp_service_extension +# +# Supported extensions and parameters: +# VRFY +# EXPN +# HELP +# 8BITMIME +# SIZE # one optional parameter +# ENHANCEDSTATUSCODES +# AUTH # one or more of [PLAIN LOGIN ANONYMOUS CRAM-MD5 CRAM-SHA1] +# DSN +# SEND +# SAML +# SOML +# TURN +# ETRN +# ATRN +# VERP +# MTRK +# CHUNKING +# DELIVERBY # one optional parameter +# SUBMITTER +# CHECKPOINT +# BINARYMIME +# NO-SOLICITING # one optional parameter +# FUTURERELEASE # two required parameters +# +# Default: none +# +smtps_service_extension VRFY +smtps_service_extension EXPN +smtps_service_extension HELP +smtps_service_extension 8BITMIME +smtps_service_extension SIZE 102400000 +smtps_service_extension ENHANCEDSTATUSCODES +smtps_service_extension AUTH PLAIN LOGIN ANONYMOUS CRAM-MD5 CRAM-SHA1 +smtps_service_extension DSN +smtps_service_extension ETRN +# + + +######################################### +# smtps_auth_reversibleonly +# +# Only offer authentication mechanisms which allow reversing +# the authentication information sent by a client +# to clear text username/password. +# This option only takes effect if 'smtps_extended_smtp' is +# enabled and 'smtps_service_extension AUTH' is configured. +# +# Syntax: smtps_auth_reversibleonly [yes|no] +# +# Default: no +# +#smtps_auth_reversibleonly yes + + +######################################### +# smtps_auth_required +# +# Force the client to authenticate. +# This option only takes effect if 'smtps_extended_smtp' is +# enabled and 'smtp_service_extension AUTH' is configured. +# +# Syntax: smtps_auth_required [yes|no] +# +# Default: no +# +#smtps_auth_required yes + + +######################################### +# smtps_ssl_keyfile +# +# Name of the SSL private key PEM file. +# The key MUST NOT be encrypted! +# +# The file must be placed in /certs/ +# +# Syntax: smtps_ssl_keyfile +# +# Default: default_key.pem +# +#smtps_ssl_keyfile smtps_key.pem + + +######################################### +# smtps_ssl_certfile +# +# Name of the SSL certificate PEM file. +# +# The file must be placed in /certs/ +# +# Syntax: smtps_ssl_certfile +# +# Default: default_cert.pem +# +#smtps_ssl_certfile smtps_cert.pem + + +######################################### +# smtps_ssl_dhfile +# +# Name of the Diffie-Hellman parameter PEM file. +# +# The file must be placed in /certs/ +# +# Syntax: smtps_ssl_dhfile +# +# Default: none +# +#smtps_ssl_dhfile smtps_dh1024.pem + + +############################################################# +# Service POP3 +############################################################# + +######################################### +# pop3_bind_port +# +# Port number to bind POP3 service to +# +# Syntax: pop3_bind_port +# +# Default: 110 +# +#pop3_bind_port 110 + + +######################################### +# pop3_banner +# +# The banner string used in POP3 greeting message +# +# Syntax: pop3_banner +# +# Default: \"INetSim POP3 Server ready\" +# +pop3_banner \"Magma POP3 Server ready\" + + +######################################### +# pop3_hostname +# +# The hostname used in POP3 greeting message +# +# Syntax: pop3_hostname +# +# Default: pop3host +# +pop3_hostname pop3server + + +######################################### +# pop3_mbox_maxmails +# +# Maximum number of e-mails to select from supplied mbox files +# for creation of random POP3 mailbox +# +# Syntax: pop3_mbox_maxmails +# +# Default: 10 +# +#pop3_mbox_maxmails 20 + + +######################################### +# pop3_mbox_reread +# +# Re-read supplied mbox files if POP3 service was inactive +# for seconds +# +# Syntax: pop3_mbox_reread +# +# Default: 180 +# +#pop3_mbox_reread 300 + + +######################################### +# pop3_mbox_rebuild +# +# Rebuild random POP3 mailbox if POP3 service was inactive +# for seconds +# +# Syntax: pop3_mbox_rebuild +# +# Default: 60 +# +#pop3_mbox_rebuild 120 + + +######################################### +# pop3_enable_apop +# +# Turn APOP on or off +# +# Syntax: pop3_enable_apop [yes|no] +# +# Default: yes +# +#pop3_enable_apop no + + +######################################### +# pop3_auth_reversibleonly +# +# Only offer authentication mechanisms which allow reversing +# the authentication information sent by a client +# to clear text username/password +# +# Syntax: pop3_auth_reversibleonly [yes|no] +# +# Default: no +# +#pop3_auth_reversibleonly yes + + +######################################### +# pop3_enable_capabilities +# +# Turn support for pop3 capabilities on or off +# +# Syntax: pop3_enable_capabilities [yes|no] +# +# Default: yes +# +#pop3_enable_capabilities no + + +######################################### +# pop3_capability +# +# POP3 capabilities offered to client. +# For more information, see +# +# +# Syntax: pop3_capability +# +# Supported capabilities and parameters: +# TOP +# USER +# UIDL +# SASL # one or more of [PLAIN LOGIN ANONYMOUS CRAM-MD5 CRAM-SHA1] +# RESP-CODES +# EXPIRE # one required parameter and one optional parameter +# LOGIN-DELAY # one required parameter and one optional parameter +# IMPLEMENTATION # one required parameter +# AUTH-RESP-CODE +# STLS +# +# Default: none +# +pop3_capability TOP +pop3_capability USER +pop3_capability SASL PLAIN LOGIN ANONYMOUS CRAM-MD5 CRAM-SHA1 +pop3_capability UIDL +pop3_capability IMPLEMENTATION \"Magma POP3 server\" +pop3_capability STLS +# + + +######################################### +# pop3_ssl_keyfile +# +# Name of the SSL private key PEM file. +# The key MUST NOT be encrypted! +# +# This option only takes effect if 'pop3_enable_capabilities' is +# true and 'pop3_capability STLS' is configured. +# +# The file must be placed in /certs/ +# +# Note: If no key file is specified, capability STLS will be disabled. +# +# Syntax: pop3_ssl_keyfile +# +# Default: default_key.pem +# +#pop3_ssl_keyfile pop3_key.pem + + +######################################### +# pop3_ssl_certfile +# +# Name of the SSL certificate PEM file. +# +# This option only takes effect if 'pop3_enable_capabilities' is +# true and 'pop3_capability STLS' is configured. +# +# The file must be placed in /certs/ +# +# Note: If no cert file is specified, capability STLS will be disabled. +# +# Syntax: pop3_ssl_certfile +# +# Default: default_cert.pem +# +#pop3_ssl_certfile pop3_cert.pem + + +######################################### +# pop3_ssl_dhfile +# +# Name of the Diffie-Hellman parameter PEM file. +# +# The file must be placed in /certs/ +# +# Syntax: pop3_ssl_dhfile +# +# Default: none +# +#pop3_ssl_dhfile pop3_dh1024.pem + + +############################################################# +# Service POP3S +############################################################# + +######################################### +# pop3s_bind_port +# +# Port number to bind POP3S service to +# +# Syntax: pop3s_bind_port +# +# Default: 995 +# +#pop3s_bind_port 995 + + +######################################### +# pop3s_banner +# +# The banner string used in POP3 greeting message +# +# Syntax: pop3s_banner +# +# Default: \"INetSim POP3 Server ready\" +# +pop3s_banner \"POP3 Server ready\" + + +######################################### +# pop3s_hostname +# +# The hostname used in POP3 greeting message +# +# Syntax: pop3s_hostname +# +# Default: pop3host +# +pop3s_hostname pop3server + + +######################################### +# pop3s_mbox_maxmails +# +# Maximum number of e-mails to select from supplied mbox files +# for creation of random POP3 mailbox +# +# Syntax: pop3s_mbox_maxmails +# +# Default: 10 +# +#pop3s_mbox_maxmails 20 + + +######################################### +# pop3s_mbox_reread +# +# Re-read supplied mbox files if POP3S service was inactive +# for seconds +# +# Syntax: pop3s_mbox_reread +# +# Default: 180 +# +#pop3s_mbox_reread 300 + + +######################################### +# pop3s_mbox_rebuild +# +# Rebuild random POP3 mailbox if POP3S service was inactive +# for seconds +# +# Syntax: pop3s_mbox_rebuild +# +# Default: 60 +# +#pop3s_mbox_rebuild 120 + + +######################################### +# pop3s_enable_apop +# +# Turn APOP on or off +# +# Syntax: pop3s_enable_apop [yes|no] +# +# Default: yes +# +#pop3s_enable_apop no + + +######################################### +# pop3s_auth_reversibleonly +# +# Only offer authentication mechanisms which allow reversing +# the authentication information sent by a client +# to clear text username/password +# +# Syntax: pop3s_auth_reversibleonly [yes|no] +# +# Default: no +# +#pop3s_auth_reversibleonly yes + + +######################################### +# pop3s_enable_capabilities +# +# Turn support for pop3 capabilities on or off +# +# Syntax: pop3s_enable_capabilities [yes|no] +# +# Default: yes +# +#pop3s_enable_capabilities no + + +######################################### +# pop3s_capability +# +# POP3 capabilities offered to client. +# For more information, see +# +# +# Syntax: pop3s_capability +# +# Supported capabilities and parameters: +# TOP +# USER +# UIDL +# SASL # one or more of [PLAIN LOGIN ANONYMOUS CRAM-MD5 CRAM-SHA1] +# RESP-CODES +# EXPIRE # one required parameter and one optional parameter +# LOGIN-DELAY # one required parameter and one optional parameter +# IMPLEMENTATION # one required parameter +# AUTH-RESP-CODE +# +# Default: none +# +pop3s_capability TOP +pop3s_capability USER +pop3s_capability SASL PLAIN LOGIN ANONYMOUS CRAM-MD5 CRAM-SHA1 +pop3s_capability UIDL +pop3s_capability IMPLEMENTATION \"Magma POP3s server\" +# + + +######################################### +# pop3s_ssl_keyfile +# +# Name of the SSL private key PEM file. +# The key MUST NOT be encrypted! +# +# The file must be placed in /certs/ +# +# Syntax: pop3s_ssl_keyfile +# +# Default: default_key.pem +# +#pop3s_ssl_keyfile pop3s_key.pem + + +######################################### +# pop3s_ssl_certfile +# +# Name of the SSL certificate PEM file. +# +# The file must be placed in /certs/ +# +# Syntax: pop3s_ssl_certfile +# +# Default: default_cert.pem +# +#pop3s_ssl_certfile pop3s_cert.pem + + +######################################### +# pop3s_ssl_dhfile +# +# Name of the Diffie-Hellman parameter PEM file. +# +# The file must be placed in /certs/ +# +# Syntax: pop3s_ssl_dhfile +# +# Default: none +# +#pop3s_ssl_dhfile pop3s_dh1024.pem + + +############################################################# +# Service TFTP +############################################################# + +######################################### +# tftp_bind_port +# +# Port number to bind TFTP service to +# +# Syntax: tftp_bind_port +# +# Default: 69 +# +#tftp_bind_port 69 + + +######################################### +# tftp_allow_overwrite +# +# Allow overwriting of existing files +# +# Syntax: tftp_allow_overwrite [yes|no] +# +# Default: no +# +#tftp_allow_overwrite yes + + +######################################### +# tftp_enable_options +# +# Turn support for tftp options on or off +# +# Syntax: tftp_enable_options [yes|no] +# +# Default: yes +# +#tftp_enable_options no + + +######################################### +# tftp_option +# +# TFTP extensions offered to client. +# For more information, see RFC 2347 +# +# Syntax: tftp_option