Honeypots: Re: honeyd

[David Halsband <david.halsband () gmail com>]

Hi Joshua,

thanks for your mail.
Yes it is Linux. But I have absolutely no rules in my iptables.
Furthermore it is possible to ping the host where honeyd is running.
Very strange.

Bye,
David




On 5/4/05, Joshua Berry <jberry () penson com> wrote:
>  Is this on a Linux box? I typically see these kind of messages when there 
> is an IPTables rule blocking the traffic.
>
>  -----Original Message-----
> *From:* David Halsband [mailto:david.halsband () gmail com] 
> *Sent:* Wednesday, May 04, 2005 8:56 AM
> *To:* honeypots () securityfocus com
> *Subject:* honeyd
>
>  Hi everyone,
>
> my honeyd is not working anymore and I don't know why.
>
> When I am trying to ping from a host in my local network (e.g. 
> 172.16.0.237 <http://172.16.0.237>) to one of my virtual hosts (e.g. 
> 172.16.0.233 <http://172.16.0.233>), I get the following error message in 
> honeyd:
>
> Sending ICMP Echo Reply: 172.16.0.233 <http://172.16.0.233> -> 
> 172.16.0.237 <http://172.16.0.237>
> couldn't send packet: Operation not permitted
>
> I use arpd to redirect the packets, which is working fine. Ethereal shows, 
> that really no Echo Reply is sent.
>
> Why? What am I doing wrong?
> Any thoughts? Any suggestions?
>
> Bye,
> David
>  


-- 
·´¯`·.¸¸.·´¯`·.¸¸.·´¯`·