diff --git a/installer/bin/clean.sh b/installer/bin/clean.sh index 384bc8c4..153bda6d 100755 --- a/installer/bin/clean.sh +++ b/installer/bin/clean.sh @@ -162,6 +162,7 @@ fuP0F () { chown tpot:tpot -R /data/p0f } + # Avoid unwanted cleaning if [ "$myPERSISTENCE" = "" ]; then diff --git a/installer/etc/tpot/systemd/tpot.service b/installer/etc/tpot/systemd/tpot.service index b6413944..c38c0b00 100644 --- a/installer/etc/tpot/systemd/tpot.service +++ b/installer/etc/tpot/systemd/tpot.service @@ -29,7 +29,6 @@ ExecStartPre=/bin/bash -c '/sbin/ip link set $(/sbin/ip address | grep "^2: " | ExecStartPre=-/bin/chmod 666 /var/run/docker.sock # Set iptables accept rules to avoid forwarding to honeytrap / NFQUEUE -# Disregards UDP1900 traffic from/to localhost, too many false positives # Forward all other connections to honeytrap / NFQUEUE ExecStartPre=/sbin/iptables -w -A INPUT -s 127.0.0.1 -j ACCEPT ExecStartPre=/sbin/iptables -w -A INPUT -d 127.0.0.1 -j ACCEPT