Honeypots mailing list archives
RE: Honeypot on DSL
From: "Stejerean, Cosmin" <cstejere () cti depaul edu>
Date: Tue, 10 May 2005 14:40:24 -0500
Is the IP address that your honeypot listen to different from the IP address of your machine? Cosmin -----Original Message----- From: Andreas Rittershofer [mailto:andreas () rittershofer de] Sent: Tuesday, May 10, 2005 12:52 AM To: pandemic () syn-recon net Cc: honeypots () securityfocus com Subject: Re: Honeypot on DSL Am Montag, den 09.05.2005, 16:03 -0500 schrieb pandemic () syn-recon net:
For a start, Is your box getting any traffic from the outside at all ?
Yes, but honeyd receives nothing. I set up honeyd and for example have a line add default tcp port 135 open But when I start honeyd and make a nmap <ip-address> -p 135 nmap shows this port as filtered and honeyd does not show any connection to port 135. I start honeyd with -i ppp0, because the machine is directly attached to DSL. Do I have to do some DNAT? Or something in the honeyd.conf? I couldn't find any hint what could be the problem. Is there any manual for honeyd? mfg ar -- E-Learning in der Schule: http://www.dbg-metzingen.de/Menschen/Lehrer/Q-T/Rittershofer/E-Learning/
Attachment:
smime.p7s
Description:
Current thread:
- RE: Honeypot on DSL, (continued)
- RE: Honeypot on DSL Stejerean, Cosmin (May 09)
- RE: Honeypot on DSL Andreas Rittershofer (May 09)
- Re: Honeypot on DSL Carol Overes (May 10)
- Message not available
- Re: Honeypot on DSL Andreas Rittershofer (May 10)
- Re: Honeypot on DSL Jan Reister (May 10)
- Re: Honeypot on DSL Jan Reister (May 11)
- RE: Honeypot on DSL Andreas Rittershofer (May 09)
- RE: Honeypot on DSL Stejerean, Cosmin (May 09)
- RE: Honeypot on DSL Andreas Rittershofer (May 11)
- RE: Honeypot on DSL Christian Kreibich (May 11)
- RE: Honeypot on DSL Andreas Rittershofer (May 12)