MHN for dummies

[Vitor Bertolazo]

Hey guys, I know that usually this kind of questions that show no expertise don't get answers, but I'm kinda desperate. I'm about to graduate and my final work is about honeypots in clouds. What I'm trying to do is to deploy a MHN server in a Azure VM.

Please note, I have little knowledge in networks and specially using Ubuntu, but I already deployed an Ubuntu 12.04 machine and tryied the step-by-step from here (https://github.com/threatstream/mhn#installing-server-tested-ubuntu-12043-x86_64). But I got stuck on some configuration settings: 

Server base url ["http://1.2.3.4"]: 
Honeymap url ["http://1.2.3.4:3000"]:
Mail server address ["localhost"]: 
Mail server port [25]: 
Use TLS for email?: y/n n
Use SSL for email?: y/n n
Mail server username [""]: 
Mail server password [""]: 
Mail default sender [""]: 

Now to the dumb questions:

1) How to finish installing? 

2) Do I need more VMs?

3) Do you guys think it's a feasible thing to do this in 3 weeks?

Sorry for these questions, but as I said, I'm kinda desperate and would appreciate any help! :)

Thanks guys.

[Jason Trost]

If you are installing this in the cloud you need to determine what the base URL is supposed to be (i.e. how would you access your MHN server via a web browser after it is setup).  Do you have an IP or a domain name associated with your MHN server?  You would enter this IP/Domain for the server base URL and just replace "1.2.3.4".

The email related inputs above are only used for password resets. They are not strictly necessary if you have admin control of the MHN server.  

Answers to Questions:

1. I assume you can now make it through the MHN server install after following what I stated above.

2. yes, you need other servers to deploy honeypots on.  We highly recommend not to run the MHN server software on the same machine as the honeypot.  I would recommend Ubuntu 12 or 14 for the honeypots.

3. Yes, if you deploy a handful of honeypots you should start getting thousands of events per day.  

I hope this helps.

--Jason

--
You received this message because you are subscribed to the Google Groups "Modern Honey Network" group.
To unsubscribe from this group and stop receiving emails from it, send an email to modern-honey-net...@googlegroups.com.
To post to this group, send email to modern-hon...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/modern-honey-network/07b0dbdb-9682-4bbf-874d-3f2a7dd72457%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--

Jason Trost | Director of ThreatStream Labs | www.threatstream.com
2317 Broadway, 3rd Floor| Redwood City, CA 94063
Phone:  386.235.0078 | Twitter:  @jason_trost

[morenike oniyide]

Hi Vitor

were you able to get round this