Re: [Labrea-users] Re: Configuration problem - tarpitting machine on local subnet

[Ed T. <ed....@et...>]

I think I finally figured out what was going on.  I had put an Exclude
on the IPs that had live machines on them, but forgot to put a HAR on
them, as well.  It seems that one of the live IPs was being grabbed by
LaBrea, and it happened to be the IP of the box which contains, among
other things, my Samba server and my Squid proxy.  So, when the Windows
box tried to access either one of them...

Anyway, I updated the config file, then killed LaBrea long enough to
clear that IP up, and since I restarted it I haven't seen that IP pop
back up.

Thanks for the assist.

-- 
Cheers,
Ed Truitt
PGP fingerprint:  5368 D25E 468C A250 9833  CCD6 DBAE 9C25 02F9 0AB9
http://www.etee2k.net
http://www.bsatroop148.org

"Note to spammers:  my 'delete' key is connected to YOUR ISP.
 Also, if you send me UCE, I reserve the right to post your spew
on my Web site, with the appropriate color commentary, so that
others may have a good laugh at your expense."