[Honeywall] Virtualize honeypots in honeynet using VMware and Roo
steve_njk at hotmail.com
Thu Dec 13 20:33:25 EST 2007
I read about the guide of setting up honeypots via vmware but was quite unsuccessful.
My setup is like http://www.honeynet.pk/honeywall/roo/page2b.htm.
Based on the guide, it state for my host OS(ROO) to have 2 bridge and 1 host-only adapter.
What I don't understand is that why is it that they put ethernet and ethernet1 as bridge and ethernet2 as host only.
>From my understanding of honeynet
1) Isn't eth1 which is the "ethernet1" in vmware supposed to connect to the honeypot, which is supposed to be host-only connection as it connect up to the other honeypots.
2) Likewise isn't "ethernet2" supposed to be connecting to the management interface? If so, what type of connection should I use? bridge or host-only?
I've followed the guide, my honeypots can ping one another but my "intruder" can't seems to ping them at all.
I read up about the different type of virtual adapter in vmware and realise that my honeypot is in a private virtual network, which make them unable to connect to the outside world vice verse?
I'm able to access the management interface through my honeypots is it correct? From what I read about honeywall, the computer accessing the management interface has to plug into the eth2 port of the honeywall.
Express yourself instantly with MSN Messenger! Download today it's FREE!
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Honeywall