Stop worms and scanners!

If any of you have unix boxes on your network, you might be very interested
in this!

Someone wrote a little program: "LaBrea - the Tarpit" to thwart code red,
nimda, and other port scanning annoyances. If you have a block of IP
addresses at your place, chances are you have quite a few unused
ones. This little gem can respond to any scans directed at you unused
addresses, start a socket with the scanning machine, then tweak IP
parameters so the connection runs at a crawl. This can keep it tied up for
a long time, preventing it from wasting your bandwidth, and moving on to
other IP blocks. Schweet :)

Here's a mirror site:
http://www.threenorth.com/LaBrea/
You can also go to the originator, but their site is really slow right now:
http://www.hackbusters.net/

-Wayne Cox