Re: regarding setup of a honeypot in restricted environment

On Mon, 24 Nov 2008 21:09:17 EST, Noah Meyerhans said:

> A lot of the fun malware is client-side these days, anyway, so why don't
> you make a client honeypot: http://en.wikipedia.org/wiki/Honeyclient

Amen to that. It's pretty much directly attributable to 2 specific things:

1) XP SP2 shipping with a usable firewall.

2) the tendency for SOHO-class cable/DSL routers to do NAT unless you beat the
snot out of them.