From owner-freebsd-security Sun Jun 25 8:13:18 2000 Delivered-To: freebsd-security@freebsd.org Received: from gw.nectar.com (gw.nectar.com [209.98.143.44]) by hub.freebsd.org (Postfix) with ESMTP id D305F37B5B4 for ; Sun, 25 Jun 2000 08:13:14 -0700 (PDT) (envelope-from nectar@nectar.com) Received: from bone.nectar.com (bone.nectar.com [10.0.1.105]) by gw.nectar.com (Postfix) with ESMTP id C17069B37; Sun, 25 Jun 2000 10:13:12 -0500 (CDT) Received: by bone.nectar.com (Postfix, from userid 1001) id 74DD51DC6; Sun, 25 Jun 2000 10:13:12 -0500 (CDT) Date: Sun, 25 Jun 2000 10:13:12 -0500 From: "Jacques A . Vidrine" To: cjclark@alum.mit.edu Cc: freebsd-security@freebsd.org Subject: Re: jail(8) Honeypots Message-ID: <20000625101312.D16657@bone.nectar.com> Mail-Followup-To: "Jacques A . Vidrine" , cjclark@alum.mit.edu, freebsd-security@freebsd.org References: <20000624125540.A256@dialin-client.earthlink.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2i In-Reply-To: <20000624125540.A256@dialin-client.earthlink.net>; from cristjc@earthlink.net on Sat, Jun 24, 2000 at 12:55:40PM -0700 X-Url: http://www.nectar.com/ Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Sat, Jun 24, 2000 at 12:55:40PM -0700, Crist J. Clark wrote: > I searched the mail archive and read the jail(8) manpage and was > surprised not to see any discussion of using jail for a honeypot, > an IDS. That might be analogous to including discussion of accounting systems in awk(1) :-) But perhaps have a look at William R. Cheswick and Steven M. Bellovin, ``Firewalls and Internet Security'' (Addison-Wesley 1994) -- Jacques Vidrine / n@nectar.com / nectar@FreeBSD.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message