Re: DNS Names for external services

Frank Knobbe <[email protected]> Tue, 27 Apr 2010 14:08:31 -0500
Newsgroups gmane.comp.security.firewalls.wizards
Message-ID <1272395311.55474.1.camel@localhost>
On Mon, 2010-04-26 at 19:46 -0400, Morty Abzug wrote:
> >>> Likewise, if you don't run an FTP server (or CVS, or POP3, or...),
> >>> setup DNS records for those pointing to your honeypot. Use it to
> >>> respond in anyway you see fit for defense of your network (blocking
> >>> the IP, etc).

> Re-read above.  GP advocated setting up a honeypot on well-known names
> that *blocks* the source IP.

No, I said "Use it to respond in anyway you see fit for defense of your
network". Blocking was one example. If you don't want to do that, then
don't :)  Respond anyway you like.

Cheers,
Frank

_______________________________________________
firewall-wizards mailing list
[email protected]
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
signature.asc (application/pgp-signature, 826 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (FreeBSD)
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=My1Q
-----END PGP SIGNATURE-----