Re: regarding setup of a honeypot in restricted environment

[Valdis.Kletnieks () vt edu]

On Mon, 24 Nov 2008 21:09:17 EST, Noah Meyerhans said:

> A lot of the fun malware is client-side these days, anyway, so why don't
> you make a client honeypot: http://en.wikipedia.org/wiki/Honeyclient

Amen to that.  It's pretty much directly attributable to 2 specific things:

1) XP SP2 shipping with a usable firewall.

2) the tendency for SOHO-class cable/DSL routers to do NAT unless you beat the
snot out of them.

Attachment: _bin
Description: