Re: which firewall

From: chris@nospam.com
Date: 05/28/02


From: chris@nospam.com
Date: Tue, 28 May 2002 09:07:12 -0700

On Tue, 28 May 2002 12:38:53 GMT, "Main" <bbaker6@houston.rr.com>
wrote:

>> Getting NetBIOS names is Ok for you? Null-session and remote logins too?
>> You should take care of your accounts and shares...
>>
>> just my 2 cents...
>>
>Don't misunderstand. I was simply saying that without tweaking anything,
>thats all i could get. I've since blocked that. i can't currently determine
>the OS

Have you looked at something called 'fingerprinting'. It's a means of
determining the OS/firewall by examining how it deals with specific
packet malformations, looking at tcp sequences, etc. For example, the
response caused by sending an ftp packet out of sequence (ignored, or
error message)

I'd be reluctant to say it's impossible to determine the OS if there
is any connectivity at all.



Relevant Pages

  • Re: which firewall
    ... I was simply saying that without tweaking anything, ... packet malformations, looking at tcp sequences, etc. ...
    (comp.security.firewalls)
  • Re: which firewall
    ... I was simply saying that without tweaking anything, ... packet malformations, looking at tcp sequences, etc. ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: which firewall
    ... I was simply saying that without tweaking anything, ... packet malformations, looking at tcp sequences, etc. ...
    (comp.security.firewalls)