Suggestions for honeypotting on BSD?
reddit / BSD

----------------------------------------------------------------------
baordog · 2015-03-16 22:43

OK, I am new to BSD, and I am looking to setup a malware honeypot on
FreeBSD. Do you have any suggestions?

I am thinking of using HoneyD, but I'd love to here some suggestions
on how to properly isolate the service. Thinking jails here, but I
very barely know what I'm talking about.

----------------------------------------------------------------------
rhabarba · 2015-03-16 23:38

The most interesting question is why you actually want to start your
BSD experience with such a thing.

----------------------------------------------------------------------
baordog · 2015-03-17 00:19

Because I'm into malware analysis as a recreational thing. Thought
this would be a fun project.

----------------------------------------------------------------------
marmulak · 2015-03-17 02:35

Does any malware actually run BSD?

----------------------------------------------------------------------
baordog · 2015-03-17 03:22

That's not the point, it's meant to trick the malware into making
infection attempts and capture that data. It is *optimal* if it cannot
actually run.

----------------------------------------------------------------------
ben_bai · 2015-03-17 21:25

Chrooted SSH-honeypot on OpenBSD
http://securit.se/2014/05/how-to-install-kippo-ssh-honeypot-on-
openbsd-5-5-with-chroot/