One possible problem could be that one didn’t save change of settitngs either on HaaS My Hoeypot page or reForis HaaS page… Please check whether both entries are the same and is the same as it is stated on “ps -ef | grep haas” output.
Another possible problem is that one is too eager to see result of changes… as it is stated on HaaS results page: “Captured sessions are updated once per hour.”
My thinking was that my internet provider is blocking port 22. However, they just confirmed to me that they are not blocking that port. I have tried from an external network to ssh to the public IP of my router. However, I get connection refused.
Performing an ssh from my internal network to port 2525 (i.e. ssh -p 2525 <turris_IP>), I eventually did see the following on the HaaS page (1 hour later):
I’m not network specialist, but it seems to me that external access to your net is somehow blocked… Didn’t you add or change firewall rules?
Good point. I am not aware of any changes in this respect - only for openvpn. However I will check into this further.
Are you sure that you received public IPv4 address from your ISP?
Check output fromifconfig eth2 command:
eth2 Link encap:Ethernet HWaddr D8:58:D7:00:46:5A
inet addr:89.177.XXX.YYY Bcast:89.177.XXX.255 Mask:255.255.255.0
I have exactly the same issue and have tried all of the same things, but can’t seem to get it to start logging sessions again.
Maybe it is an idea to combine Haas and Sentinel to one package/feed/application ?
