Focus on Microsoft
Preventing OS Detection Feb 20 2004 10:28PM
Paul Kurczaba (paul myipis com) (3 replies)
Re: Preventing OS Detection Feb 24 2004 05:05PM
Tony Moran (focus-ms Ayahuasca NET)
Re: Preventing OS Detection Feb 24 2004 02:47AM
Andy Murren (andy murren org)
Paul,

: If I go to http://uptime.netcraft.com and enter my website, Netcraft will
: display my web servers OS, determined from the TCP/IP packet. Is there a way
: in the windows registry to prevent Netcraft (or anyone else) from
: identifying my OS? On the page http://www.webhostgear.com/36,1.html in
: paragraph titled "Netcraft is Watching", it briefly describes that registry
: changes can be made. Can someone please give me some specific registry
: changes to prevent others from identifying my web servers OS?
:

The OS fingerprinting Netcraft and Nmap use is done by looking at the
particular way the OS responds to specially crafted IP packets. This
is generally a kernel level action. There is an article linked from
root prompt (http://www.rootprompt.org/) entitled "A Practical
Approach for Defeating Nmap OS-Fingerprinting". It is a *nix based
discussion, but will give you information and links on OS
Fingerprinting and what to do to throw it off.

HTH

--
Andy Murren

------------------------------------------------------------------------
---
Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection

Protect your network with the comprehensive security solution that
integrates six applications for ease of use and lower TCO.

Firewall - Virus protection - Spam protection - URL blocking - VPN
- Wireless security.

Download 30-day evaluation at:
http://www.securityfocus.com/sponsor/Astaro_focus-ms_040219
------------------------------------------------------------------------
---

[ reply ]
RE: Preventing OS Detection Feb 24 2004 12:24AM
Jimmy Sansi (jsansi ritzfoodservice com)


 

Privacy Statement
Copyright 2010, SecurityFocus