Since I would like to set up a simple honeypot and wget may have security issues (e.g. port scanning, proxy to internal network).
Instead of setting a firewall, disabling wget completely may be another choice.
Perhaps letting wget get a time-out is a good way.
From b13253 on April 03, 2014 19:30:07
Since I would like to set up a simple honeypot and wget may have security issues (e.g. port scanning, proxy to internal network). Instead of setting a firewall, disabling wget completely may be another choice.
Perhaps letting wget get a time-out is a good way.
I offer an example output when wget is disabled:
nas3:~# wget -O .,.tgz http://example.com/something.tgz --2014-04-04 00:27:50-- http://example.com/something.tgz Connecting to 1.2.3.4:80... ( <===< Freeze at here )
Original issue: http://code.google.com/p/kippo/issues/detail?id=93