Honeypot Newbie

["Joseph R. Gruber" <jgruber () tampabay rr com>]

Hi!

I've heard about honeypots for a long while but being a broke college
student I don't have much money to have a whole honeynet setup.  After
reading the Vmware article though I've really become interested in
setting up my first honeypot.

I'm slightly familiar with Linux but I figured for my first honeypot I
would set it up using Windows XP with IIS 5 installed.  What I'm looking
for is advice & suggestions on how to monitor & set this up correctly.
What tools should I be looking at for monitoring the honeypot from the
host machine?  What about a firewall?  Through my readings it seems as
if I would want all inbound traffic but outbound traffic very limited.
I'm not familiar with any Windows firewall that would allow something
like that.

Any advice, suggestions or tips are greatly appreciated!

Thanks,
Joseph Gruber
jgruber () tampabay rr com