Message Board

Newbie/Basic Questions

Multiple honeypots on multiple sites

Author: J.Johnson (13 Feb 05 2:34pm)

I maintain several sites, some of which do not have scripting support. I have therefore set up traps that point back to the PHP trap file on my own site on the sites that lack scrpting support.

I am however capable of obtaining cgi support through a third party that will allow each domain to employ its own trap. It occurred to me that I should set up separate accounts for each of the other sites in this manner, since the traps on these other sites rely on the continued operation of my site--and there's no anticipating what may happen.

My question relates to the domain name assignment for the traps, since they will reside in the cgi-bin of a subdomain of another domain.

Must the domain to which the traps are registered use the name of the subdomain on which they reside, or may they be registered under the domain on which they will be employed?

Re: Multiple honeypots on multiple sites

Author: M.Prince (13 Feb 05 2:51pm)

First, there's nothing wrong with pointing links from sites without scripting support to a central honey pot on a server with scripting support. In fact, in the future we are thinking of allowing individuals with basic HTML sites to include links to some central pots. We can even allow statistics tracking through a CGI variable. That's still probably a little time off, but it's something we're thinking about in order to expand the number of people and sites that can help with the Project.

Now, to your main question....

The way the system works the domain you list needs to match the domain that resolves to the server where the hpot will actually be installed (i.e., you should list the subdomain of the server where the cgi-bin folder is located). Again, that will not affect the domains from which you can link to the central hpot. If you'd like, you can use a redirect to hide the fact that the links are pointing off-site.

Re: Multiple honeypots on multiple sites

Author: J.Johnson (15 Feb 05 11:47am)

Thanks. I already serve the hpot on our site up from each of several other sites without scripting support. I thought it might serve PHP's desire for as many domains as possible to serve them from other domains, and doing so would also assure that the hpots remained online in the event that our site went off line.

The notion I had was to create accounts and put the hpots for the other sites on a (freebie) tripod subdomain with a mirror of the site, because they provide cgi support.

I promote PHP on another site, and this is something I thought I could suggest to Web site operators who lack scripting support. Would doing so be acceptable?

Re: Multiple honeypots on multiple sites

Author: M.Prince (15 Feb 05 5:03pm)

Creating a central honey pot on a free domain is completely acceptable. Unfortunately, and this isn't what you were asking but I thought I should let you know before you go to far with what you're planning, we've found that Tripod and a number of the free webspace services block out-bound HTTP connections. This means that the honey pot can't call to our servers in order to receive a new honey pot email address and therefore it won't work.

If you find a free service that does support out-bound connections then please let us know as a number of users have expressed interest in doing what you are trying to do....