AMP icon indicating copy to clipboard operation
AMP copied to clipboard

Unable to Un-honeypot SFTP

Open IceOfWraith opened this issue 1 year ago • 4 comments

Arc: Unable to un-honeypot SFTP via AMP WebUI (it bans across the entire target/stack, not just the instance specifically - controller restart required)

IceOfWraith avatar Apr 12 '24 04:04 IceOfWraith

The SFTP honeypot is just a setting? It can be disabled via ADS01s config. If this setting isn't behaving then that needs to be made more explicit: image

PhonicUK avatar Jul 31 '24 10:07 PhonicUK

@PhonicUK Controller > Target will ban this across the entire target and controller stack, wherein the controller requires a restart to remove the honeypot ban

southnode avatar Jul 31 '24 10:07 southnode

The first part is by design since the controller is in charge of all auth, but I can change it so that disabling that setting clears the ban list.

PhonicUK avatar Jul 31 '24 10:07 PhonicUK

Just something that does it because that's not documented anywhere.

southnode avatar Jul 31 '24 14:07 southnode

Addressed a while ago - turning this setting off clears the ban list.

PhonicUK avatar Dec 16 '24 20:12 PhonicUK