Security Basics mailing list archives
Re: Preventing OS Detection
From: "Naren" <naren () pactech net>
Date: Wed, 25 Feb 2004 11:44:56 +0800
If you use an application level proxy firewall, they are pretty good at hiding the actual OS of the web server .. my S$ 0.02 Naren ----- Original Message ----- From: "Hagen, Eric" <ehagen () DenverNewspaperAgency com> To: "Paul Kurczaba" <paul () myipis com>; <security-basics () securityfocus com> Sent: Tuesday, February 24, 2004 3:14 AM Subject: RE: Preventing OS Detection
To clarify, there are some rudimentary TCP/IP settings available in this key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters But they are unlikely to be able to change the OS Fingerprint as seen by NMap, Netcraft, etc. Eric -----Original Message----- From: Paul Kurczaba [mailto:paul () myipis com] Sent: Friday, February 20, 2004 3:30 PM To: security-basics () securityfocus com Subject: Preventing OS Detection If I go to http://uptime.netcraft.com and enter my website, Netcraft will display my web servers OS, determined from the TCP/IP packet. Is there a
way
in the windows registry to prevent Netcraft (or anyone else) from identifying my OS? On the page http://www.webhostgear.com/36,1.html in paragraph titled "Netcraft is Watching", it briefly describes that
registry
changes can be made. Can someone please give me some specific registry changes to prevent others from identifying my web servers OS? Thanks, Paul Kurczaba
Attachment:
InterScan_Disclaimer.txt
Description:
--------------------------------------------------------------------------- ----------------------------------------------------------------------------
Current thread:
- Preventing OS Detection Paul Kurczaba (Feb 20)
- RE: Preventing OS Detection dave kleiman (Feb 24)
- RE: Preventing OS Detection Tiago Halm (Feb 27)
- Re: Preventing OS Detection Vincent (Feb 24)
- RE: Preventing OS Detection Jim Laverty (Feb 25)
- RE: Preventing OS Detection Joey Peloquin (Feb 24)
- RE: Preventing OS Detection Aditya, ALD [Aditya Lalit Deshmukh] (Feb 27)
- RE: Preventing OS Detection Joey Peloquin (Feb 27)
- RE: Preventing OS Detection Aditya, ALD [Aditya Lalit Deshmukh] (Feb 27)
- <Possible follow-ups>
- RE: Preventing OS Detection Hagen, Eric (Feb 24)
- RE: Preventing OS Detection Hagen, Eric (Feb 24)
- Re: Preventing OS Detection Naren (Feb 25)
- FW: Preventing OS Detection check (Feb 25)
- MS IIS Urlscan - Preventing OS Detection Tom Milliner (Feb 25)
- RE: Preventing OS Detection dave kleiman (Feb 24)