RE: Honeypot on DSL

["Stejerean, Cosmin" <cstejere () cti depaul edu>]

Is the IP address that your honeypot listen to different from the IP address
of your machine?

Cosmin

-----Original Message-----
From: Andreas Rittershofer [mailto:andreas () rittershofer de] 
Sent: Tuesday, May 10, 2005 12:52 AM
To: pandemic () syn-recon net
Cc: honeypots () securityfocus com
Subject: Re: Honeypot on DSL

Am Montag, den 09.05.2005, 16:03 -0500 schrieb pandemic () syn-recon net:

> For a start, Is your box getting any traffic from the outside at all ?

Yes, but honeyd receives nothing.

I set up honeyd and for example have a line

add default tcp port 135 open

But when I start honeyd and make a 

nmap <ip-address> -p 135

nmap shows this port as filtered and honeyd does not show any connection
to port 135.

I start honeyd with -i ppp0, because the machine is directly attached to
DSL.

Do I have to do some DNAT?
Or something in the honeyd.conf?

I couldn't find any hint what could be the problem.

Is there any manual for honeyd?

mfg ar

-- 
E-Learning in der Schule:
http://www.dbg-metzingen.de/Menschen/Lehrer/Q-T/Rittershofer/E-Learning/

Attachment: smime.p7s
Description: