Support Honeyd

Re: Honeypot/net IDS System

From: Niels Provos <provos_at_citi.umich.edu>
Date: Fri, 27 Feb 2004 16:48:56 -0500

On Fri, Feb 27, 2004 at 10:55:40AM +0530, Aditya, ALD [Aditya Lalit Deshmukh] wrote:
> this a very cool idea... guys any one have good pointers about how
> to do this with postfix ?

To do that on a real mail server, you would have to know which connection
is spammy or not. OpenBSD's spam'd and pf could do some of that for you.
If you want a Honeypot based tarpit, you could use Honeyd's tarpit mode
and the smtp simulator that ships with it.

Niels.
Received on Fri Feb 27 2004 - 17:09:49 PST

This message: [ Message body ]
Next message: FreeCC: "Error running Honeyd-WIN32"
Previous message: Klaus Steding-Jessen: "Announce: mydoom.pl (honeyd script)"

Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]

Search For Information

NB: This is a filtered version of the Honeypots mailing list. Only posts that concern Honeyd are shown here. For more recent discussions visit the forums.

Honeyd Resources

Honeyd Research

Honeypot Resources

Honeypot Books

Happy Hacking

Support Honeyd

Search Amazon

Re: Honeypot/net IDS System