From owner-freebsd-chat Tue Feb 20 21:34:46 2001 Delivered-To: freebsd-chat@freebsd.org Received: from lariat.org (lariat.org [12.23.109.2]) by hub.freebsd.org (Postfix) with ESMTP id 1BC7137B6FA for ; Tue, 20 Feb 2001 21:34:43 -0800 (PST) (envelope-from brett@lariat.org) Received: from mustang.lariat.org (IDENT:ppp0.lariat.org@lariat.org [12.23.109.2]) by lariat.org (8.9.3/8.9.3) with ESMTP id WAA25325; Tue, 20 Feb 2001 22:34:31 -0700 (MST) Message-Id: <4.3.2.7.2.20010220223130.048203e0@localhost> X-Sender: brett@localhost X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Tue, 20 Feb 2001 22:34:27 -0700 To: David Kelly , freebsd-chat@FreeBSD.ORG From: Brett Glass Subject: Re: mousetrap for port 111? In-Reply-To: <200102210312.f1L3CVm06055@grumpy.dyndns.org> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-chat@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org At 08:12 PM 2/20/2001, David Kelly wrote: >Getting tired of the probes on port 111. Anyone know of a "mousetrap" to >fake being Sun RPC, complete with emulation of what the script kiddies >are looking for? You mean a honeypot? --Brett "Suppose," [Pooh] said to Piglet, "you wanted to catch me, how would you do it?" "Well," said Piglet, "I should do it like this. I should make a Trap, and I should put a Jar of Honey in the Trap, and you would smell it, and you would go in after it, and -- " "And I would go in after it," said Pooh excitedly, "only very carefully so as not to hurt myself, and I would get to the Jar of Honey, and I should lick round the edges first of all, pretending that there wasn't any more, you know, and then I should walk away and think about it a little, and then I should come back and start licking in the middle of the jar, and then -- " --A. A. Milne To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-chat" in the body of the message