Honey Pot |
Post Reply 
|
| Author | |
kspare 
Senior Member 
Joined: 26 January 2005 Location: Canada Status: Offline Points: 334 |
 Post Options
 Thanks(0)
 Quote Reply
 Topic: Honey PotPosted: 09 May 2005 at 1:48pm |
|
Ok, time to share some tricks and tips... I wanted all my spamfilter instances to read the same autowhitelist. So what I did was create a sql script that updates the server field in all messages to say server 4. So only that server writes the autoupdate. Every 10 mins it copies that file to a repository and all the server copy from that file ever 10 mins. How can we do this for the honeypot as far as sharing what IP's should be blocked? If the file was copied to a master file, and then an updated copy was copied down will spamfilter read that file and use any new ips?? Edited by kspare |
|
 |
|
|
LogSat
Admin Group 
Joined: 25 January 2005 Location: United States Status: Offline Points: 4104 |
Post Options
Thanks(0)
Quote Reply
Posted: 09 May 2005 at 10:16pm |
|
SpamFilter *will* reload the honeypot file if it is modified
externally. SpamFilter also caches new IP to ban and dumps them to the
files every minute or so. The two processes may conflict depending on
who has the latest info (updated file or cached IPs), and as this is a
very new feature still being tested, we don't really have analyzed this
situation yet...
|
|
|
|
|
kspare
Senior Member
Joined: 26 January 2005 Location: Canada Status: Offline Points: 334 |
Post Options
Thanks(0)
Quote Reply
Posted: 10 May 2005 at 9:19am |
|
Is it possible to start storing these files in the database to make it easier to share amongst different servers? When it dumps to file does it over write the file or just add to it? |
|
|
|
|
LogSat
Admin Group
Joined: 25 January 2005 Location: United States Status: Offline Points: 4104 |
Post Options
Thanks(0)
Quote Reply
Posted: 10 May 2005 at 10:40pm |
|
The problem with storing lists in the database has always been
performance. The time may have come to revisit that for just ONE list
that would allow the end users to manage their entries. We'll be
thinking about that in the near future.
|
|
|
|
Topic Options|
Post Reply
|
|
Tweet
|
| Forum Jump | Forum Permissions You cannot post new topics in this forum You cannot reply to topics in this forum You cannot delete your posts in this forum You cannot edit your posts in this forum You cannot create polls in this forum You cannot vote in polls in this forum |
This page was generated in 0.223 seconds.