Date: Thu, 27 Sep 2001 17:43:48 +0000 From: "WebSec WebSec" <secure21st@hotmail.com> To: fabre@matranet.com Cc: will@physics.purdue.edu, security@FreeBSD.ORG Subject: Re: LaBrea for BSD? Message-ID: <F43CHusMjQHtMFaukyC00002c7d@hotmail.com>
next in thread | raw e-mail | index | archive | help
<html><div style='background-color:'><DIV> <DIV> <DIV> <P>Here is an idea, </P> <P>How about LaBrea for BSD (installed on a DHCP Server) automatically takes all IPs and releases them as clients request those IPs? </P> <P>Another idea is that LaBrea server installed on DHCP "informs" LaBrea clients which IPs to emulate....</P> <P> </P> <P>Serg Perfi - YDAP security consulting group</P> <DIR> <DIR> <DIR><FONT face=Helv color=#000000 size=2> <P>To: fabre@matranet.com</P> <P>cc:<B> </B>will@physics.purdue.edu, security@FreeBSD.ORG </P></DIR></DIR> <P>Date:<B> </B>09/27/2001 01:01 PM</P> <DIR> <DIR> <P>From: owner-freebsd-security@FreeBSD.ORG</P> <P>Subject: Re: LaBrea for BSD?</P> <P> </P></DIR></DIR> <P>At 09:05 AM 9/27/2001, Laurent Fabre wrote:</P> <P>>I thought about it yup but....</P> <P>>The fact is I need to capture something lower than IP, just because</P> <P>>we need to monitor ARP request in order to acquire new IP addresses.</P> <P>Automatic acquisition of unused IPs is, IMHO, a bad idea. If you're</P> <P>assigning addresses via DHCP, it just plain won't work; the honeypot</P> <P>will acquire addresses that your DHCP server still thinks can be</P> <P>assigned. And since every Windows client tries to ARP its own address</P> <P>as it starts up (in an attempt to make sure it's not stepping on</P> <P>someone else), a machine that has been turned off for the night</P> <P>will refuse to get on the Net in the morning if its address has</P> <P>been claimed.</P> <P>I'd prefer to specify the addresses to watch, thank you....</P> <P>--Brett</P> <P> </P> <P>To Unsubscribe: send mail to majordomo@FreeBSD.org</P> <P>with "unsubscribe freebsd-security" in the body of the message</P></DIR></FONT><BR><BR><BR>The reasonable man adapts himself to the world; </DIV>the unreasonable one persists in trying to adapt <DIV></DIV>the world to himself. Therefore all progress <DIV></DIV>depends on the unreasonable man. <DIV></DIV> <DIV></DIV>-- George Bernard Shaw <DIV></DIV></DIV></DIV></div><br clear=all><hr>Get your FREE download of MSN Explorer at <a href='http://go.msn.com/bql/hmtag_itl_EN.asp'>http://explorer.msn.com</a><br></html>; To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?F43CHusMjQHtMFaukyC00002c7d>