Honeypots mailing list archives

Re: DNS honeypots?


From: Valdis.Kletnieks () vt edu
Date: Tue, 02 Mar 2010 16:48:59 -0500

On Tue, 02 Mar 2010 15:00:43 EST, Jason Lewis said:
Anyone have any pointers to dns honeypots or maybe just BIND
configurations that would allow logging of malicious queries without
actually executing them?

Out of curiosity, how do you get traffic directed to the honeypot without
listing it in an NS entry for an SOA?  Give it a hostname like ns1.exampe.com
and hope that works?

Attachment: _bin
Description:


Current thread: