MS IIS Urlscan - Preventing OS Detection

["Tom Milliner" <tom.milliner () verizon net>]

Incidentally, you can disguise your MS IIS web server to 
make it appear to be an Apache web server,  BUT if you
had used Urlscan,  the fact that you ran Urlscan can be
seen by certain scanning type tools.  If the scanner knows
you ran Urlscan, a MS product which hardens their IIS
product, then they know that your system is MS IIS.  

I don't have more details on this (I heard it from a reliable
source), but maybe someone can verify it and explain it.  

Tom Milliner, CPA, MCSE, CNE
2404 Summer Place Dr.
Irving, TX  75062
Day:  (214) 540-2741
tom.milliner () verizon net
 
 


---------------------------------------------------------------------------
----------------------------------------------------------------------------