WWWDMZ - jhu-information-security-institute/NwSec GitHub Wiki
- Ubuntu 18.04 LTS server OS
- Installed nginx, filebeat, metricbeat
- filebeat and metricbeat send data to elasticsearch VM on port 9200
- see repo for notes on installation of nginx
- see SELKS page for notes on filebeat and metricbeat installation
- Firewall notes:
ufw default deny incoming ufw default allow outgoing sudo ufw allow 22/tcp && sudo ufw allow 80/tcp && sudo ufw allow 443/tcp && sudo ufw allow 5601/tcp && sudo ufw allow 9200/tcp ufw enable ufw reload ufw status
- Network details
FQDN: netsec.isi.jhu.edu IP: 128.220.249.6/28 GW: 128.220.249.1 DNS: 127.0.0.53 SM: 128.220.249.0/28