[geeks] LaBrea

[geeks at sunhelp.org]

tarpits are an idea that started circulating widely about a year ago. There
are many advantages to them, but only if a human is doing the scanning.
Automated scanning doesn't care if it takes forever to slog though a subnet.

An idea I had was to have a device forward just the ports required and
tarpit the rest. This would work for a single IP. This is a feature that
should be implemented in a firewall or router. I suppose I should pattent
the idea but have no idea how to go about it.

James Fogg, Network Engineer
Vicinity Corporation - New Hampshire
(603) 442-1751

~ -----Original Message-----
~ From: Joshua D Boyd [mailto:jdboyd at cs.millersville.edu]
~ Sent: Wednesday, July 17, 2002 11:14 AM
~ To: geeks at sunhelp.org
~ Subject: [geeks] LaBrea
~ 
~ 
~ http://www.wired.com/news/technology/0,1282,46964,00.html
~ or
~ http://www.hackbusters.net/LaBrea/
~ 
~ Has anyone heard of this program before?  It sounds like an
~ interesting idea, but I don't really understand what makes it work.
~ Seems like a bad design element on the part of codered if a single
~ machine can grab and hold it's scanning threads like that.
~ 
~ And if looks like only people with more than 1 IP can really make full
~ use of it.
~ 
~ -- 
~ Joshua D. Boyd
~ _______________________________________________
~ GEEKS:  http://www.sunhelp.org/mailman/listinfo/geeks
~