Centos instalation 7.1
======================================

Validated to work on Centos version 7.1-1503 & Conpot v4 (but may likely work on other centos versions/ rpm disto.

1. login via ssh with a account with sufficient system privileges (e.g root)
----------------------------------------------------------------------------
2. Upgrade the system
---------------------
::

$ sudo yum -y update

3. Install epel repository
--------------------------

::

$ sudo rpm -iUvh http://dl.fedoraproject.org/pub/epel/7/x86_64/e/epel-release-7-5.noarch.rpm

4. Install needed packages and libs
-----------------------------------
::

$ sudo yum -y install libxslt-devel libxml2-devel python-pip python-2.7.5-16.el7.x86_64
$ sudo yum -y install mariadb-server mysql-connector-python.noarch mariadb-devel-5.5.41-2.el7_0.x86_64
$ sudo yum -y install git python-lxml.x86_64 python-devel
$ sudo yum -y groupinstall "Development tools"
$ sudo easy_install -U setuptools

Below command force lxml to be version 3.3.5
::

$ sudo easy_install lxml==3.3.5

5. Starting mysql server
------------------------
::

$ sudo chkconfig mariadb on
$ sudo service mariadb start

Sugestions to mysql secure instalation are to change the root password and accect to removing anonymous users,test database and Disallow root login.
::

$ sudo mysql_secure_installation

6. CONPOT installation
----------------------
::

$ cd /usr/local/src
$ sudo git clone https://github.com/glastopf/conpot
$ cd conpot/
$ sudo python setup.py install

7. Open ports in firewalld : 80 , 102, 161 and 502
---------------------------------------------------
::

$ firewall-cmd --permanent --add-port=80/tcp
$ firewall-cmd --permanent --add-port=102/tcp
$ firewall-cmd --permanent --add-port=161/tcp
$ firewall-cmd --permanent --add-port=502/tcp
$ firewall-cmd --reload


8. temp fix as conpot currently requires the "nogroup" for the moment - raised in issue #267
--------------------------------------------------------------------------------------------
::

$ sudo groupadd nogroup

9. Start the Conpot honeypot
-----------------------------

::

$ conpot --template default

10. check if its running and you can access it from remote (in browser)
-----------------------------------------------------------------------

::

$ lynx http://YOUR_IP/