Date: Fri, 6 Jul 2001 11:07:52 -0700 From: "Eric Parusel" <lists@globalrelay.net> To: <freebsd-security@freebsd.org>, "aphex" <pulsewidth@gmx.net> Subject: Re: Hiding Versions Message-ID: <01e401c10646$9305e900$0600020a@frontend> References: <20010706175344.E400937B403@hub.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
> 7/07/2001 1:14:35 AM, Peter Pentchev <roam@orbitel.bg> wrote: > > >On Fri, Jul 06, 2001 at 05:02:17PM +0200, Khalil.Haddad@ubs.com wrote: > >> Hello all, > >> > >> After visiting this web site : www.netcraft.com, I discovered that it > >> is possible to trace version changes of OS, apache or php. > [snip] > >> By the way, the output for my server gives me Apache/1.3.19 but i have > >> upgraded to 1.3.20 recently, why hasn't this been taken in > >> consideration? (i used ports to upgrade) > > > >Maybe no one has performed a Netcraft query for your server since > >you upgraded. > > > >G'luck, > >Peter > > I've been able to fool netcraft.com into saying I run a different webserver, but am still unable to hide the fact that I'm running freebsd. > Would you happen to know how they get this information? no banners on any services display the fact that im running freebsd so I'm guessing > its got to do with tcp/ip fingerprints. Anyway at all to hide this? > > Regards, > > --> aphex I'm behind a firewall system, and netcraft.com reports my OS as Unknown... With only port 80 and 443 open to the outside, it probably doesn't have enough info to figure out what OS I'm running. Try firewalling, it's a good idea anyways :) Now how did you fool netcraft.com into saying that you run a different webserver? Later, Eric To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?01e401c10646$9305e900$0600020a>