Re: Preventing OS Detection

From: Naren (naren_at_pactech.net)
Date: 02/25/04

  • Next message: sunflower: "Re: weird"
    To: "Hagen, Eric" <ehagen@DenverNewspaperAgency.com>, "Paul Kurczaba" <paul@myipis.com>, <security-basics@securityfocus.com>
    Date: Wed, 25 Feb 2004 11:44:56 +0800
    
    
    

    If you use an application level proxy firewall, they are pretty good at
    hiding the actual OS of the web server ..

    my S$ 0.02

    Naren
    ----- Original Message -----
    From: "Hagen, Eric" <ehagen@DenverNewspaperAgency.com>
    To: "Paul Kurczaba" <paul@myipis.com>; <security-basics@securityfocus.com>
    Sent: Tuesday, February 24, 2004 3:14 AM
    Subject: RE: Preventing OS Detection

    > To clarify, there are some rudimentary TCP/IP settings available in this
    > key:
    >
    > HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
    >
    > But they are unlikely to be able to change the OS Fingerprint as seen by
    > NMap, Netcraft, etc.
    >
    > Eric
    >
    >
    > -----Original Message-----
    > From: Paul Kurczaba [mailto:paul@myipis.com]
    > Sent: Friday, February 20, 2004 3:30 PM
    > To: security-basics@securityfocus.com
    > Subject: Preventing OS Detection
    >
    >
    > If I go to http://uptime.netcraft.com and enter my website, Netcraft will
    > display my web servers OS, determined from the TCP/IP packet. Is there a
    way
    > in the windows registry to prevent Netcraft (or anyone else) from
    > identifying my OS? On the page http://www.webhostgear.com/36,1.html in
    > paragraph titled "Netcraft is Watching", it briefly describes that
    registry
    > changes can be made. Can someone please give me some specific registry
    > changes to prevent others from identifying my web servers OS?
    >
    > Thanks,
    > Paul Kurczaba

    
    
    

    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------



  • Next message: sunflower: "Re: weird"

    Relevant Pages

    • Preventing OS Detection
      ... If I go to http://uptime.netcraft.com and enter my website, ... display my web servers OS, ... it briefly describes that registry ... Astaro Security Linux -- firewall with Spam/Virus Protection ...
      (Focus-Microsoft)
    • Re: Preventing OS Detection
      ... > display my web servers OS, ... > in the windows registry to prevent Netcraft from ... Can someone please give me some specific registry ... INSPECT language where you can inspect packets destined for your server. ...
      (Security-Basics)
    • Preventing OS Detection
      ... If I go to http://uptime.netcraft.com and enter my website, ... display my web servers OS, ... it briefly describes that registry ... Astaro Security Linux -- firewall with Spam/Virus Protection ...
      (Security-Basics)
    • RE: Preventing OS Detection
      ... >display my web servers OS, determined from the TCP/IP packet. ... Can someone please give me some specific registry ... Respect to TCP/IP settings, all of the ...
      (Focus-Microsoft)
    • Re: [fw-wiz] Security Audit and Priorities
      ... > everything about their web servers. ... > other security areas. ... What is the best way to block Netcraft from obtain all this information. ... > Are there Open Source solutions that would be better than commercial ...
      (Firewall-Wizards)