Re: Honeypot/net IDS System

[Niels Provos <provos () citi umich edu>]

On Fri, Feb 27, 2004 at 10:55:40AM +0530, Aditya, ALD [Aditya Lalit Deshmukh] wrote:
> this a very cool idea... guys any one have good pointers about how
> to do this with postfix ?

To do that on a real mail server, you would have to know which connection
is spammy or not.  OpenBSD's spam'd and pf could do some of that for you.
If you want a Honeypot based tarpit, you could use Honeyd's tarpit mode
and the smtp simulator that ships with it.

Niels.