2005
thp (0.4.6-8) unstable; urgency=low
* Added adduser dependancy
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Wed, 11 May 2005 21:08:35 +0200
thp (0.4.6-7) unstable; urgency=low
* Change GECOS of the thpot user
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Thu, 6 Jan 2005 15:05:42 +0100
2004
thp (0.4.6-6) unstable; urgency=low
* Create the 'thp' user with 'nogroup' as group, thanks to Corey Wright for spotting this (Closes: #263876)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Fri, 6 Aug 2004 09:24:40 +0200
thp (0.4.6-5) unstable; urgency=low
* Fixed lintian bugs:
- SECTION -> 8 in manpage
- install thpfunc.pl mode 644
- remove end point in description
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Thu, 5 Aug 2004 20:00:44 +0200
thp (0.4.6-4) unstable; urgency=low
* Added logrotate files (this was in the TODO)
* Create 'thpot' user to avoid giving 'nobody' the capability to
fill in the logs under /var (this was in the TODO)
* Removed DONE items from the TODO :-)
* Updated README.Debian appropiately
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Tue, 18 May 2004 18:53:48 +0200
2003
thp (0.4.6-3) unstable; urgency=low
* Fixed syntax errors in scripts in order to fix file inclusion (Closes: #215947) * Modified the logic in thpot (logthis) in order to be able to get debugging information if run with -d and to determine if modules are loaded and functions available (otherwise it's difficult to debug module problems) * Added a check in 'build' in order to determine if the libraries to be included in the package are syntactically correct. * Enabled warning mode and fixed yet more syntax errors: - Syntax errors in thp.conf ($X is not the same as @X in scalar context) - Smtp.pl uses @sendmail instead of \@sendmail - != instead of ne in shell.pl
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Fri, 17 Oct 2003 20:59:15 +0200
thp (0.4.6-2) unstable; urgency=low
* The "Happy birthday, to me! release" * Fixed logthis in order to include files from the /usr/share directory (commented out the thpdir redefeinition) (Closes: #215082) * Modified xinetd examples so that they can be "dragged and drop" since they now point to the /usr/sbin/thpot binary directly
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Fri, 10 Oct 2003 17:37:26 +0200
thp (0.4.6-1) unstable; urgency=low
* Initial Release.
* Modified thp.conf so that it is easier to add new service banners and
so that _all_ banners are chosen randomly.
* Greeting program in thp.conf is /bin/false in order to avoid calling
fortunes (will add it to Suggests: in the future)
* Provide a sample inetd.conf but will not add the honeypot directly
into the system (yet)
* Logthis has been renamed to 'thpot' since the name is too generic
* Added a manpage for thpot
* Improvements:
- SMTP banner is not hardcoded (derived from 'simple honeypot')
- Added SSH function (very simple one, but could be used to trap
0-days)
- Ftp, SSH and SMTP banners are not hardcoded but are changed
randomly in configuration.
- Sanity check in getip just in case intf is not properly defined.
- Added ls output to shell (taken from 'simple honeypot' with some
changes to avoid sending errors)
- Added errorfile to debug problems within the scripts (and avoid
ouputting them to the attacker)
- Added sanity checking in http responses (in case the user has not
defined a proper directory with them)
- Sanity checks on greeting programs (should probably check wether
the first argument is executable)
- Included the analyzer perl script from simple honeypot into the
examples directory.
- lib/httpd modified to use a predefined version of server in case
it is not defined (the user screwed up the config)
- lib/httpd modified to setup a valid version just in case the
remote attacker does not send a valid HTTP header for some reason
- added lib/pop3 (from 'simple honeypot')
- fixed bug in lib/smtp.pl (smtp -> smtphash)
- subsituted the code for lib/smtp.pl with the code from 'simple honeypot'
- removed the exit 0 from lib/http.pl or otherwise the CATALOG will
not be closed (and logs will not be created for the end of a
http connection)
-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Wed, 17 Sep 2003 08:43:34 +0200