This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision Last revision Both sides next revision | ||
|
en:participation [08.11.2016 17:46] ph@cesnet.cz warden_apply.sh link |
en:participation [08.11.2016 17:54] ph@cesnet.cz Typos |
||
|---|---|---|---|
| Line 3: | Line 3: | ||
| ===== Options ===== | ===== Options ===== | ||
| - | Data lze přijímat a odesílat některým z následujících způsobů: | ||
| You can receive and send the data by using the following means: | You can receive and send the data by using the following means: | ||
| Line 16: | Line 15: | ||
| Choose the client name - it starts with the organisation domain name in reverse order. You can use the reversed DNS name of the machine, supplemented by the name of the application or the sensor. However, it is not wise to derive the name tail from the DNS for some detectors, namely honeypots, because it could spoil the honeypot location. For bigger organisations we recommend adding the name of the particular department (''cz.organisation.ict.probe1'') or other logical structure (''cz.organisation.detectors.probe1''). //The name can contain only letters, digits, underscores and dots and must not start by digit.// | Choose the client name - it starts with the organisation domain name in reverse order. You can use the reversed DNS name of the machine, supplemented by the name of the application or the sensor. However, it is not wise to derive the name tail from the DNS for some detectors, namely honeypots, because it could spoil the honeypot location. For bigger organisations we recommend adding the name of the particular department (''cz.organisation.ict.probe1'') or other logical structure (''cz.organisation.detectors.probe1''). //The name can contain only letters, digits, underscores and dots and must not start by digit.// | ||
| - | Send following data to the [[contact|kontaktní adresu]] by signed email (preferably by [[https://tcs.cesnet.cz/|TCS]] personal certificate): | + | Send following data to the [[contact|contact address]] by signed email (preferably by [[https://tcs.cesnet.cz/|TCS]] personal certificate): |
| * chosen client name | * chosen client name | ||
| * machine DNS name | * machine DNS name | ||
| Line 35: | Line 34: | ||
| (Script is available at [[downloads#certificate_application_script|downloads]] page.) | (Script is available at [[downloads#certificate_application_script|downloads]] page.) | ||
| - | V aktuálním adresáři vzniknou soubory //key.pem// a //cert.pem// (a //csr.pem//, který nadále není důležitý, ale můžete ho uschovat pro případné ladění). | ||
| The files //key.pem// and //cert.pem// will appear in the current directory (along with //csr.pem//, which is not necessary anymore, but you can save it for potential debugging). | The files //key.pem// and //cert.pem// will appear in the current directory (along with //csr.pem//, which is not necessary anymore, but you can save it for potential debugging). | ||
| Line 62: | Line 60: | ||
| * honeypot does not report its IP address (use anonymisation), | * honeypot does not report its IP address (use anonymisation), | ||
| * there are no IP addresses from the private address space - [[https://tools.ietf.org/html/rfc1918|RFC1918]], or any other network ranges which you would rather not publish. | * there are no IP addresses from the private address space - [[https://tools.ietf.org/html/rfc1918|RFC1918]], or any other network ranges which you would rather not publish. | ||
| - | * If everything seems ok, ask at the [[contact|contact address]] for lifting the testing period and after approoval change the URL to the production server (see [[#konfigurace|configuration]]), and/or remove //Test// category if needed. | + | * If everything seems ok, ask at the [[contact|contact address]] for lifting the testing period and after approoval change the URL to the production server (see [[#configuration]]), and/or remove //Test// category if needed. |
| * Check again, that everything gets sent properly. For repeated testing you can use //Test// category anytime even on the production Warden server - it gets ignored by both recipients and statistical modules. | * Check again, that everything gets sent properly. For repeated testing you can use //Test// category anytime even on the production Warden server - it gets ignored by both recipients and statistical modules. | ||
| * Direct possible problem reports or further questions to the [[contact|contact address]]. | * Direct possible problem reports or further questions to the [[contact|contact address]]. | ||
CESNET, z. s. p. o.
Generála Píky 26
16000 Prague 6
Tel: +420 234 680 222
Fax: +420 224 320 269
info@cesnet.cz
Tel: +420 234 680 222
GSM: +420 602 252 531
Fax: +420 224 313 211
support@cesnet.cz