From 3452f08cf0d08f7445dcd8824d305d66e3024251 Mon Sep 17 00:00:00 2001 From: Steve Clement Date: Thu, 30 Sep 2021 13:50:50 +0900 Subject: [PATCH] chg: [doc] Some clarifications and updates --- README.md | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/README.md b/README.md index 9c9ef77..6324501 100644 --- a/README.md +++ b/README.md @@ -100,11 +100,12 @@ You should now be able to send your IoC-containing mails to misp_handler@YOURDOM #### Bonus: Fake-SMTPD spamtrap -If you want to process all incoming junk mails automatically and collect the contained information in a (separate?) MISP instance, you could use the fake_smtp.py script. It listens on port 25, accepts all mails and pushes them through mail_to_misp to a MISP instance. +If you want to process all incoming junk mails automatically and collect the contained information in a separate throw-away MISP instance, you could use the fake_smtp.py script. It listens on port 25, accepts all mails and pushes them through mail_to_misp to a MISP instance. +It can also be configured to listen on an SSL port. (465) 1. Configure mail_to_misp_config.py -2. ln -s mail_to_misp_config.py fake_smtp_config.py +2. cp mail_to_misp_config.py fake_smtp_config.py 3. Make port 25 accessible to normal users @@ -172,10 +173,10 @@ Obviously, you would like to filter mails based on subject or from address and p ### The easy way ```bash -(sudo) pip install (--user) poetry +pip install --user poetry # Install other python requirements -poetry install +poetry install -E fileobjects -E openioc -E virustotal -E email -E url # Test if the script is working ./mail_to_misp.py -h