[Labrea-users] Configuration problem - tarpitting machine on local subnet

[Ed T. <ed....@et...>]

I am having a problem with the latest version of LaBrea (2.5-stable-1, 
compiled from source and running on a SuSE 9.0 system).  I am tarpitting 
a local WinXP box (a legit, un0\/\/n3d box on my subnet) on ports 139 
and 445.  I have tried IPIGNORE and IPI on both the address and the 
block, but it still gets pitted.  I am also noticing that IPs I have 
configured as "exclude" are being captured (and some of them have real 
machines on them!)  Is anyone else having these problems, and if so how 
did you get around them?

BTW, when I was running 2.4b3, I never had these problems.

-- 
Cheers,
Ed Truitt
PGP fingerprint:  5368 D25E 468C A250 9833  CCD6 DBAE 9C25 02F9 0AB9
http://www.etee2k.net
http://www.bsatroop148.org

"Note to spammers:  my 'delete' key is connected to YOUR ISP.
 Also, if you send me UCE, I reserve the right to post your spew
on my Web site, with the appropriate color commentary, so that
others may have a good laugh at your expense."