Re: LaBrea for BSD?

From: Brett Glass (brett@lariat.org)
Date: 09/27/01 

Date: Thu, 27 Sep 2001 11:52:42 -0600
To: "WebSec WebSec" <secure21st@hotmail.com>, fabre@matranet.com
From: Brett Glass <brett@lariat.org>

This could worm but would require some hooks in the ISC DHCP server
code.

There'd still be a problem, though, if you were using fixed IPs and no
DHCP. Here's the scenario: You turn off your workstation; the tarpit claims
its address; you come in next morning and turn it on; your workstation reports
that it is kicking itself off the network because it has ARPed its IP address
and found it in use by someone else. (Windows machines with fixed IPs always
do this; other operating systems might as well.)

--Brett

At 11:43 AM 9/27/2001, WebSec WebSec wrote:
  

>Here is an idea,
>
>How about LaBrea for BSD (installed on a DHCP Server) automatically takes all IPs and releases them as clients request those IPs?
>
>Another idea is that LaBrea server installed on DHCP "informs" LaBrea clients which IPs to emulate....
>
>
>
>Serg Perfi - YDAP security consulting group

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

Relevant Pages

  • Re: naming the boxes in a DHCP net
    ... Why not set up static IPs for each box and enter the ... My DHCP server knows both statically ... files to provide forward and reverse DNS. ... My reverse zone for the dynamically assigned IPs is: ...
    (alt.os.linux.suse)
  • Re: [opensuse] Can I lock a DHCP ip adress?
    ... DNS and gateway too, so it might not be trivial). ... that have static IPs configured in them; ... The dhcp server may not know that one of the IPs it has for the giving some one has stolen already and is using it. ... you can run away with that on a home lan. ...
    (SuSE)
  • ISA 2004, VPN and DHCP problem
    ... I'm having problems with ISA 2004 that is supposed to ... Everything is OK until I try to assign IPs via DHCP server ... DHCP server to assign IPs to VPN clients' option, ...
    (microsoft.public.isaserver)
  • ISA 2004, VPN and DHCP problem
    ... I'm having problems with ISA 2004 that is supposed to ... Everything is OK until I try to assign IPs via DHCP server ... DHCP server to assign IPs to VPN clients' option, ...
    (microsoft.public.isa.vpn)
  • Re: Changing IP address
    ... we'll be using fixed IPs, so that won't be an issue. ... do NOT use it as DHCP server. ... Use the server and the domain computers ...
    (microsoft.public.win2000.networking)