From fa8b8ade6fe52ba224072d6ea206063586442235 Mon Sep 17 00:00:00 2001 From: Axel Eble Date: Fri, 31 Oct 2025 18:10:28 +0100 Subject: [PATCH 1/5] Update Dockerfile Moved sshd to port 2222 in the container to work around issues with Podman --- src/Dockerfile | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/src/Dockerfile b/src/Dockerfile index 686504d..36db82c 100644 --- a/src/Dockerfile +++ b/src/Dockerfile @@ -78,8 +78,13 @@ ENV PATH="/home/appuser/venv/bin:$PATH" # Copy application code COPY monitor.py /home/appuser/code/ +# Move sshd to Port 2222 +# change /etc/ssh/sshd_config by uncommenting Port 22 and changing it to Port 2222 +RUN sed -i.orig -e 's/^#\(Port 22\)/\122/' /etc/ssh/sshd_config + # Expose SSH port -EXPOSE 22 +# Changed from 22 to 2222 +EXPOSE 2222 # Report the version of the openSSH server RUN sshd -V From 603d461c85ebf76267c1cb2d9f32fd72f3bb1224 Mon Sep 17 00:00:00 2001 From: Axel Eble Date: Fri, 31 Oct 2025 19:21:00 +0100 Subject: [PATCH 2/5] Update docker-compose.yml to use port 2222 instead of 22 --- docker-compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker-compose.yml b/docker-compose.yml index 14d0359..a56d6f7 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -12,7 +12,7 @@ services: NETWATCH_TEST_MODE: ${NETWATCH_TEST_MODE:-false} restart: unless-stopped ports: - - "${NETWATCH_PORT:-22}:22" + - "${NETWATCH_PORT:-22}:2222" deploy: resources: limits: From 14f6aa005882dc7a8c1ee0cf830a0c18a2aaff3a Mon Sep 17 00:00:00 2001 From: Axel Eble Date: Fri, 31 Oct 2025 19:21:40 +0100 Subject: [PATCH 3/5] Update Dockerfile From 1b4fd6d3bd67465ceba575ff70603c28f78c0f00 Mon Sep 17 00:00:00 2001 From: Axel Eble Date: Sat, 1 Nov 2025 19:48:45 +0100 Subject: [PATCH 4/5] enabled IPv6 enabled IPv6 in docker default network and added v6 translated port --- docker-compose.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/docker-compose.yml b/docker-compose.yml index a56d6f7..8be8555 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -1,5 +1,7 @@ version: "3" - +networks: + default: + enable_ipv6: true services: NetWatchSSHAttackPod: image: netwatchteam/netwatch_ssh-attackpod:latest @@ -13,6 +15,7 @@ services: restart: unless-stopped ports: - "${NETWATCH_PORT:-22}:2222" + - "[::]:${NETWATCH_PORT:-22}:2222" deploy: resources: limits: From 7a95d0c74009edd8ee59538c3c952a15a4f60088 Mon Sep 17 00:00:00 2001 From: Axel Eble Date: Sat, 1 Nov 2025 19:53:45 +0100 Subject: [PATCH 5/5] Enabled IPv6 added sed instruction to uncomment AddressFamily and put AddressFamily any in the sshd configfile --- src/Dockerfile | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/Dockerfile b/src/Dockerfile index 36db82c..3d6bea1 100644 --- a/src/Dockerfile +++ b/src/Dockerfile @@ -80,7 +80,8 @@ COPY monitor.py /home/appuser/code/ # Move sshd to Port 2222 # change /etc/ssh/sshd_config by uncommenting Port 22 and changing it to Port 2222 -RUN sed -i.orig -e 's/^#\(Port 22\)/\122/' /etc/ssh/sshd_config +RUN sed -i.orig -e 's/^#\(Port 22\)/\122/' \ + -e 's/^#\(AddressFamily\).*$/\1 any/' /etc/ssh/sshd_config # Expose SSH port # Changed from 22 to 2222