--- name: "inetsim.conf" section: "5" platform: "linux" package: "inetsim" version: "1.3.2+dfsg.1-1" release: "Debian 13 (Trixie)" platforms: ["linux"] url: "https://new.carta.tech/inetsim.conf" --- # inetsim.conf(5) Configuration file for INetSim ## NAME inetsim.conf - Configuration file for INetSim ## DESCRIPTION *inetsim.conf* is the configuration file for [**inetsim**(1)](/inetsim/1.md). The format of *inetsim.conf* is simple: one option per line, with blank lines and lines starting with # ignored. ## GLOBAL OPTIONS - *start\_service SERVICE* Start service SERVICE. - *service\_bind\_address ADDRESS* The IP address to bind services to. - *service\_run\_as\_user USER* User to run services. - *service\_max\_childs NUMBER* Maximum number of child processes (number of parallel connections) for each service. - *service\_timeout SECONDS* Timeout in seconds after which a connection is closed by the service. - *\[servicename\]\_bind\_port PORT* PORT number to bind service to. - *create\_reports \[YES\|NO\]* Create report with a summary of connections for the session on shutdown. - *report\_language LANGUAGE* Set language for reports. - *include FILENAME* Include additional file in configuration. Allowed only in main configuration file. ## FAKETIME OPTIONS - *faketime\_init\_delta SECONDS* Initial number of seconds (positive or negative) relative to current date/time for fake time used by all services. If set to '0', current date/time is used. - *faketime\_auto\_delay SECONDS* Number of seconds to wait before incrementing/decrementing fake time by amount of seconds specified with **faketime\_auto\_increment**. Setting to '0' disables this option. - *faketime\_auto\_increment SECONDS* Number of seconds by which fake time is incremented/decremented at regular intervals specified by **faketime\_auto\_delay**. This option only takes effect if **faketime\_auto\_delay** is enabled (not set to '0'). ## ADDITIONAL DNS OPTIONS - *dns\_default\_ip IP-ADDRESS* Default IP address to return in DNS replies. - *dns\_default\_hostname HOSTNAME* Default hostname to return in DNS replies. - *dns\_default\_domainname DOMAINNAME* Default domainname to return in DNS replies. - *dns\_static FQDN\_HOSTNAME IP-ADDRESS* Static mapping for DNS. - *dns\_version STRING* Version string to return. ## ADDITIONAL HTTP(S) OPTIONS - *http(s)\_version* Version string to return in HTTP(S) replies. - *http(s)\_post\_limit NUMBER* Size limit for POST requests in bytes. - *http(s)\_fakemode \[YES\|NO\]* Turn HTTP(S) fake mode on or off. - *http(s)\_fakefile EXTENSION FILENAME MIMETYPE* The fake files returned in fake mode based on the file extension in the HTTP(S) request. - *http(s)\_default\_fakefile FILENAME MIMETYPE* The default fake file and MIME type returned in fake mode if the file extension in the HTTP(S) request does not match any of the extensions defined with **http(s)\_fakefile**. - *http(s)\_static\_fakefile PATH FILENAME MIMETYPE* The fake files returned in fake mode based on the path in the HTTP(S) request. ## ADDITIONAL SMTP(S) OPTIONS - *smtp(s)\_banner STRING* The banner string used in SMTP greeting message. - *smtp(s)\_fqdn\_hostname FQDN\_HOST* The FQDN hostname used for SMTP. - *smtp(s)\_helo\_required \[YES\|NO\]* Client has to send HELO/EHLO before any other command. - *smtp(s)\_extended\_smtp* Turn support for 'Extended SMTP' (ESMTP) on or off. - *smtp(s)\_service\_extension EXTENSION \[PARAMETER(S)\]* SMTP service extensions offered to client. - *smtp(s)\_auth\_reversibleonly \[YES\|NO\]* Only offer authentication mechanisms which allow reversing the authentication information sent by a client to clear text username/password. - *smtp(s)\_auth\_required \[YES\|NO\]* Force the client to authenticate. ## ADDITIONAL POP3(S) OPTIONS - *pop3(s)\_banner STRING* The banner string used in POP3 greeting message. - *pop3(s)\_hostname HOST* The hostname used in POP3 greeting message. - *pop3(s)\_mbox\_maxmails NUMBER* Maximum number of e-mails to select from supplied mbox files for creation of random POP3 mailbox. - *pop3(s)\_mbox\_reread NUMBER* Re-read supplied mbox files if POP3 service was inactive for \ seconds. - *pop3(s)\_mbox\_rebuild NUMBER* Rebuild random POP3 mailbox if POP3 service was inactive for \ seconds. - *pop3(s)\_auth\_reversibleonly \[YES\|NO\]* Only offer authentication mechanisms which allow reversing the authentication information sent by a client to clear text username/password. - *pop3(s)\_enable\_apop \[YES\|NO\]* Turn APOP on or off. - *pop3(s)\_enable\_capabilities \[YES\|NO\]* Turn support for pop3 capabilities on or off. - *pop3(s)\_capability CAPABILITY \[PARAMETER(S)\]* POP3 capabilities offered to client. ## ADDITIONAL FTP(S) OPTIONS - *ftp(s)\_banner STRING* The banner string used in FTP greeting message. - *ftp(s)\_version STRING* Version string to return in replies to the STAT command. - *ftp(s)\_recursive\_delete \[YES\|NO\]* Allow recursive deletion of directories, even if they are not empty. - *ftp(s)\_max\_filesize NUMBER* Size limit for uploaded files in bytes. ## ADDITIONAL TFTP OPTIONS - *tftp\_allow\_overwrite \[YES\|NO\]* Allow overwriting of existing files. - *tftp\_max\_filesize NUMBER* Size limit for uploaded files in bytes. - *tftp\_enable\_options \[YES\|NO\]* Turn support for tftp options on or off. - *tftp\_option OPTION PARAMETER(S)* TFTP options offered to client. ## ADDITIONAL NTP OPTIONS - *ntp\_server\_ip IP-ADDRESS* The IP address to return in NTP replies. - *ntp\_strict\_checks \[YES\|NO\]* Turn strict checks for client packets on or off. ## ADDITIONAL IRC OPTIONS - *irc\_fqdn\_hostname FQDN\_HOST* The FQDN hostname used for IRC. - *irc\_version STRING* Version string to return. ## ADDITIONAL DUMMY OPTIONS - *dummy\_banner STRING* Banner string sent to client if no data has been received for **dummy\_banner\_wait** seconds since the client has established the connection. If set to an empty string (""), only CRLF will be sent. This option only takes effect if **dummy\_banner\_wait** is not set to '0'. - *dummy\_banner\_wait NUMBER* Number of seconds to wait for client sending any data after establishing a new connection. If no data has been received within this amount of time, **dummy\_banner** will be sent to the client. Setting to '0' disables sending of a banner string. ## REDIRECT OPTIONS - *redirect\_enabled \[YES\|NO\]* Turn connection redirection on or off. - *redirect\_unknown\_services \[YES\|NO\]* Redirect connection attempts to unbound ports to dummy service. - *redirect\_external\_address IP-ADDRESS* IP address used as source address if **INetSim** acts as a router for redirecting packets to external networks. This option only takes effect if static rules for redirecting packets to external networks are defined (see **redirect\_static\_rule**). - *redirect\_static\_rule PROTOCOL IP-ADDRESS:PORT IP-ADDRESS:PORT* Static mappings for connection redirection. - *redirect\_change\_ttl \[YES\|NO\]* Change the time-to-live header field to a random value in outgoing IP packets. - *redirect\_exclude\_port PROTOCOL:PORT* Connections to \ on this port are not redirected. - *redirect\_ignore\_bootp \[YES\|NO\]* If set to 'yes', BOOTP (DHCP) broadcasts will not be redirected (UDP packets with source address 0.0.0.0, port 68 and destination address 255.255.255.255, port 67 or vice versa). - *redirect\_ignore\_netbios \[YES\|NO\]* If set to 'yes', NetBIOS broadcasts will not be redirected (UDP packets with source/destination port 137/138 and destination address x.x.x.255 on the local network). - *redirect\_icmp\_timestamp \[MS\|SEC\|NO\]* If set to 'ms', ICMP Timestamp requests will be answered with number of milliseconds since midnight UTC according to faketime. If set to 'sec', ICMP Timestamp requests will be answered with number of seconds since epoch (high order bit of the timestamp will be set to indicate non-standard value). Setting to 'no' disables manipulation of ICMP Timestamp requests. ## SSL OPTIONS - *\[servicename\]\_ssl\_keyfile FILENAME* Name of the SSL private key PEM file. The key MUST NOT be encrypted! - *\[servicename\]\_ssl\_certfile FILENAME* Name of the SSL certificate file. - *\[servicename\]\_ssl\_dhfile FILENAME* Name of the Diffie-Hellman parameter PEM file. ## SEE ALSO [**inetsim**(1)](/inetsim/1.md) ## AUTHOR Matthias Eckert \, Thomas Hungenberg \