From owner-freebsd-security  Fri Jul  6 11: 5:58 2001
Delivered-To: freebsd-security@freebsd.org
Received: from famine.OCF.Berkeley.EDU (famine.OCF.Berkeley.EDU [128.32.191.92])
	by hub.freebsd.org (Postfix) with ESMTP id CDCBA37B401
	for <freebsd-security@FreeBSD.ORG>; Fri,  6 Jul 2001 11:05:42 -0700 (PDT)
	(envelope-from malcolm@ocf.berkeley.edu)
Received: from localhost (malcolm@localhost)
	by famine.OCF.Berkeley.EDU (8.9.3/8.9.3) with ESMTP id LAA12650;
	Fri, 6 Jul 2001 11:05:40 -0700 (PDT)
X-Authentication-Warning: famine.OCF.Berkeley.EDU: malcolm owned process doing -bs
Date: Fri, 6 Jul 2001 11:05:40 -0700 (PDT)
From: Malcolm <malcolm@ocf.berkeley.edu>
To: aphex <pulsewidth@gmx.net>
Cc: <freebsd-security@FreeBSD.ORG>
Subject: Re: Hiding Versions
In-Reply-To: <20010706175344.E400937B403@hub.freebsd.org>
Message-ID: <Pine.SOL.4.33.0107061105150.11912-100000@famine.OCF.Berkeley.EDU>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

How'd you fool netcraft.com with regard to the webserver?

-Malcolm

Tomorrow, at 4:00am, aphex kvetched:

> 7/07/2001 1:14:35 AM, Peter Pentchev <roam@orbitel.bg> wrote:
>
> >On Fri, Jul 06, 2001 at 05:02:17PM +0200, Khalil.Haddad@ubs.com wrote:
> >> Hello all,
> >>
> >> After visiting this web site : www.netcraft.com, I discovered that it
> >> is possible to trace version changes of OS, apache or php.
> [snip]
> >> By the way, the output for my server gives me Apache/1.3.19 but i have
> >> upgraded to 1.3.20 recently, why hasn't this been taken in
> >> consideration? (i used ports to upgrade)
> >
> >Maybe no one has performed a Netcraft query for your server since
> >you upgraded.
> >
> >G'luck,
> >Peter
>
> I've been able to fool netcraft.com into saying I run a different webserver, but am still unable to hide the fact that I'm running freebsd.
> Would you happen to know how they get this information? no banners on any services display the fact that im running freebsd so I'm guessing
> its got to do with tcp/ip fingerprints. Anyway at all to hide this?
>
> Regards,
>
> --> aphex
>
>
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message