All eating honeypot
Go Makefile
Latest commit a5c59f1 Jan 9, 2017 @glaslos glaslos using the fixed go-sip lib

Glutton Build Status

The Glutton server listens on both TCP and UDP port 5000 for new connections.

First make sure you have installed iptables-persistent. During installation select YES for saving your current firewall rules for both ipv4 and ipv6.

apt-get install iptables-persistent conntrack golang libpcap-dev

Download and set up glutton, add GOPATH to /etc/environment. Example

mkdir /opt/go
echo export GOPATH=/opt/go >> /etc/environment
source /etc/environment
go get

To change your SSH server default port (i.e. 5001)

sed -i 's/Port 22/Port 5001/' /etc/ssh/sshd_config

Implement following iptables rules in order to redirect all traffic to port 5000 (tested on Ubuntu 14.04 and 16.04). (enable the redirect while leaving out the port you picked for sshd)

iptables -t nat -A PREROUTING -p tcp --dport 1:5000 -j REDIRECT --to-port 5000
iptables -t nat -A PREROUTING -p tcp --dport 5002:65389 -j REDIRECT --to-port 5000  
iptables -t nat -A PREROUTING -p udp -j REDIRECT --to-port 5000  

Save the new rules

service iptables-persistent save  
service iptables-persistent reload  

In case of error try

service netfilter-persistent save  
service netfilter-persistent reload

To test glutton

mkdir -p /etc/glutton  
mkdir -p /var/log/glutton
go get
go get
cp $GOPATH/src/ /etc/glutton
go run $GOPATH/src/ -log /tmp/glutton.log

To make glutton start on boot using upstart

cd $GOPATH/src/
go install
cp $GOPATH/src/ /etc/init

Now Glutton server listening on all tcp udp ports of the system except one for SSH 5001 :]

For testing Telnet locally:

sudo iptables -t nat -A OUTPUT -p tcp --dport 23 -j REDIRECT --to-port 5000