From owner-freebsd-stable  Sun Mar 25 19: 0:33 2001
Delivered-To: freebsd-stable@freebsd.org
Received: from moek.pir.net (moek.pir.net [130.64.1.215])
	by hub.freebsd.org (Postfix) with ESMTP id 4A1BF37B71B
	for <freebsd-stable@freebsd.org>; Sun, 25 Mar 2001 19:00:30 -0800 (PST)
	(envelope-from pir@pir.net)
Received: from pir by moek.pir.net with local (Exim)
	id 14hNF6-0003aY-00
	for freebsd-stable@freebsd.org; Sun, 25 Mar 2001 22:00:28 -0500
Date: Sun, 25 Mar 2001 22:00:28 -0500
From: Peter Radcliffe <pir@pir.net>
To: freebsd-stable@freebsd.org
Subject: Re: sshd revealing too much stuff.
Message-ID: <20010325220028.B12414@pir.net>
Reply-To: freebsd-stable@freebsd.org
Mail-Followup-To: freebsd-stable@freebsd.org
References: <200103260222.f2Q2MpT10302@drugs.dv.isc.org> <LNBBIBDBFFCDPLBLLLHFMEJOJIAA.juha@saarinen.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <LNBBIBDBFFCDPLBLLLHFMEJOJIAA.juha@saarinen.org>; from juha@saarinen.org on Mon, Mar 26, 2001 at 02:26:36PM +1200
X-fish: <darwin><
X-Copy-On-Listmail: Please do NOT Cc: me on list mail.
Sender: owner-freebsd-stable@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Juha Saarinen <juha@saarinen.org> probably said:
> :: 	You obviously have not needed to deal with security in a large
> :: 	corporate environment spread over semi-automonous administative
> :: 	relms.  Just telling people to upgrade does not alway work.
> :: 	You need to go out and verify that they have done this.  Logging
> :: 	onto each and every box is not a solution that scales.

Actually, yes I have on several occasions, and it scaled perfectly
well for us.

I stop bind giving out it's version number, I stop my MTA of choice
giving out it's version number. It irritates me greatly that ssh
gives out far more information than is needed for the connection.

> Hear, hear... btdt. 

*shrug*
My experience is different.

It could at least be a config file option so those of us who want to
turn it off can do so once, and no thave to rebuild it for every new
release.

P.

-- 
pir                  pir@pir.net                    pir@net.tufts.edu


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message