Re: DNS honeypots?

Jason Ross <[email protected]> Wed, 3 Mar 2010 10:29:26 -0500

Newsgroups	gmane.comp.security.honeypots
Message-ID	<[email protected]>

On Wed, Mar 3, 2010 at 9:55 AM, Brent Huston <[email protected]> wrote:
> Likely nothing today, most malware isn't smart enough to figure that out.
>
> On Mar 3, 2010, at 10:38 AM, Jason Lewis wrote:
>
>> Slightly related, I was wondering what might happen if I made every
>> query to the honeypot resolve back to the honeypot?


But it would have the advantage of allowing you to capture further
traffic for analysis through whatever tools you choose.

--
jason