fix #23, use latest kippo cfg

templates/kippo.cfg.tmpl

@@ -17,14 +17,9 @@ ssh_port = 2222
 # Hostname for the honeypot. Displayed by the shell prompt of the virtual
 # environment.
 #
-# (default: sales)
+# (default: svr03)
 hostname = server
 
-# Maximum number of concurrent connections to the honeypot
-#
-# (default: 50)
-#connection_limit = 50
-
 # Directory where to save log files in.
 #
 # (default: log)
@@ -35,12 +30,12 @@ log_path = /var/kippo/log
 # (default: dl)
 download_path = /var/kippo/dl
 
-# Maximum file size for downloaded files. A value of 0 means no limit.
-# If the file size is known to be too big from the start, the file will not be
-# stored on disk at all.
+# Maximum file size (in bytes) for downloaded files to be stored in 'download_path'.
+# A value of 0 means no limit. If the file size is known to be too big from the start,
+# the file will not be stored on disk at all.
 #
 # (default: 0)
-#download_limit_size = 100000
+#download_limit_size = 10485760
 
 # Directory where virtual file contents are kept in.
 #
@@ -51,7 +46,7 @@ download_path = /var/kippo/dl
 # (default: honeyfs)
 contents_path = honeyfs
 
-# File in the python pickle format containing the virtual filesystem. 
+# File in the python pickle format containing the virtual filesystem.
 #
 # This includes the filenames, paths, permissions for the whole filesystem,
 # but not the file contents. This is created by the createfs.py utility from
@@ -81,14 +76,16 @@ txtcmds_path = txtcmds
 
 # Public and private SSH key files. If these don't exist, they are created
 # automatically.
-#
-# (defaults: public.key and private.key)
-public_key = public.key
-private_key = private.key
+rsa_public_key = data/ssh_host_rsa_key.pub
+rsa_private_key = data/ssh_host_rsa_key
+dsa_public_key = data/ssh_host_dsa_key.pub
+dsa_private_key = data/ssh_host_dsa_key
 
-# Initial root password. NO LONGER USED!
-# Instead, see {data_path}/userdb.txt
-#password = 123456
+# Enables passing commands using ssh execCommand
+# e.g. ssh root@localhost <command>
+#
+# (default: false)
+exec_enabled = true
 
 # IP address to bind to when opening outgoing connections. Used exclusively by
 # the wget command.
@@ -115,6 +112,32 @@ private_key = private.key
 # (default: not specified)
 #fake_addr = 192.168.66.254
 
+# SSH Version String
+#
+# Use this to disguise your honeypot from a simple SSH version scan
+# frequent Examples: (found experimentally by scanning ISPs)
+# SSH-2.0-OpenSSH_5.1p1 Debian-5
+# SSH-1.99-OpenSSH_4.3
+# SSH-1.99-OpenSSH_4.7
+# SSH-1.99-Sun_SSH_1.1
+# SSH-2.0-OpenSSH_4.2p1 Debian-7ubuntu3.1
+# SSH-2.0-OpenSSH_4.3
+# SSH-2.0-OpenSSH_4.6
+# SSH-2.0-OpenSSH_5.1p1 Debian-5
+# SSH-2.0-OpenSSH_5.1p1 FreeBSD-20080901
+# SSH-2.0-OpenSSH_5.3p1 Debian-3ubuntu5
+# SSH-2.0-OpenSSH_5.3p1 Debian-3ubuntu6
+# SSH-2.0-OpenSSH_5.3p1 Debian-3ubuntu7
+# SSH-2.0-OpenSSH_5.5p1 Debian-6
+# SSH-2.0-OpenSSH_5.5p1 Debian-6+squeeze1
+# SSH-2.0-OpenSSH_5.5p1 Debian-6+squeeze2
+# SSH-2.0-OpenSSH_5.8p2_hpn13v11 FreeBSD-20110503
+# SSH-2.0-OpenSSH_5.9p1 Debian-5ubuntu1
+# SSH-2.0-OpenSSH_5.9
+#
+# (default: "SSH-2.0-OpenSSH_5.1p1 Debian-5")
+ssh_version_string = SSH-2.0-OpenSSH_5.1p1 Debian-5
+
 # Banner file to be displayed before the first login attempt.
 #
 # (default: not specified)
@@ -164,3 +187,15 @@ interact_port = 5123
 #signal_command = kippo-events
 #signal_clientversion = kippo-events
 #debug=true
+
+# Text based logging module
+#
+# While this is a database logging module, it actually just creates a simple
+# text based log. This may not have much purpose, if you're fine with the
+# default text based logs generated by kippo in log/
+#
+# To enable this module, remove the comments below, including the
+# [database_textlog] line.
+
+#[database_textlog]
+#logfile = kippo-textlog.log