[0000000000000001] # #Hide obfuscator [[0000000000000001.firewall_rules]] name = "block h2" priority = 1 block = true [0000000000000001.firewall_rules.match] eth_dst="00:00:00:00:00:02" #PLCs [[0000000000000001.hidden_node]] mac_address = "00:aa:aa:aa:aa:bb" ipv4_address = "10.0.0.2" # #bypass the obfuscator # [[0000000000000001.bypass]] #port 8080 # eth_type = 2048 # ip_proto = 6 # tcp_dst = 8080 # [[0000000000000001.bypass]] #port 8081 # eth_type = 2048 # ip_proto = 6 # tcp_dst = 8081 #Redirect any IP traffic heading to any of the protected nodes redirect to the obfuscator #Higher priority comes first (e.g. 2 then 1) [[0000000000000001.rule]] #ip to h4 id = 1 name = "redirect web to hp1" priority = 1 [0000000000000001.rule.match] eth_type = 2048 ip_proto = 6 tcp_dst = 80 [0000000000000001.rule.honeypot] mac_address = "00:aa:aa:aa:aa:cc" ipv4_address = "10.0.0.3" [[0000000000000001.rule]] #ssh to h6 id = 2 name = "redirect web2 to hp2" priority = 2 [0000000000000001.rule.match] eth_type = 2048 ip_proto = 6 tcp_dst = 8080 [0000000000000001.rule.honeypot] mac_address = "00:aa:aa:aa:aa:dd" ipv4_address = "10.0.0.4"