View previous topic :: View next topic |
Author |
Message |
soulwarrior Guru
![Guru Guru](/images/ranks/rank_rect_3.gif)
Joined: 21 Oct 2002 Posts: 331
|
Posted: Thu May 08, 2003 9:07 am Post subject: emulate ip's in a network to protect it |
|
|
Hello,
I once found an interesting program which could emulate or lets say take away every ip which isn't used be a computer.
In that way, nobody could just easily hook up a laptop on the network, because all ip's are already take away.
Think this program did also scan, if anybody tried to fiddle around with the ip's simulated by the program.
Unfornationaly I can't remember the name of the program, nor did I find it back by searching with google.
But maybe somebody knows this program???
hope so ![Wink :wink:](images/smiles/icon_wink.gif) |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
soulwarrior Guru
![Guru Guru](/images/ranks/rank_rect_3.gif)
Joined: 21 Oct 2002 Posts: 331
|
Posted: Thu May 08, 2003 2:19 pm Post subject: |
|
|
I found it back
It is called LaBrea and can be found here:
http://labrea.sourceforge.net/labrea-info.html.
Short description of the product:
Quote: |
LaBrea takes over unused IP addresses, and creates virtual servers that are attractive to worms, hackers, and other denizens of the Internet. The program answers connection attempts in such a way that the machine at the other end gets "stuck", sometimes for a very long time.
|
|
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
paranode l33t
![l33t l33t](/images/ranks/rank_rect_4.gif)
![](images/avatars/1015387799418faed51676c.jpg)
Joined: 06 Mar 2003 Posts: 679 Location: Texas
|
Posted: Thu May 08, 2003 3:50 pm Post subject: |
|
|
Ah, yes this technique is called the LaBrea Tarpit. It waits just under the maximum timeout for connections before responding. This helps slow the propagation of worms mostly, or makes people really frustrated when scanning your network for holes. _________________ Meh. |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
|