OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Eric Parusel (listsglobalrelay.net)
Date: Fri Jul 06 2001 - 13:07:52 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    > 7/07/2001 1:14:35 AM, Peter Pentchev <roamorbitel.bg> wrote:
    >
    > >On Fri, Jul 06, 2001 at 05:02:17PM +0200, Khalil.Haddadubs.com
    wrote:
    > >> Hello all,
    > >>
    > >> After visiting this web site : www.netcraft.com, I discovered
    that it
    > >> is possible to trace version changes of OS, apache or php.
    > [snip]
    > >> By the way, the output for my server gives me Apache/1.3.19 but i
    have
    > >> upgraded to 1.3.20 recently, why hasn't this been taken in
    > >> consideration? (i used ports to upgrade)
    > >
    > >Maybe no one has performed a Netcraft query for your server since
    > >you upgraded.
    > >
    > >G'luck,
    > >Peter
    >
    > I've been able to fool netcraft.com into saying I run a different
    webserver, but am still unable to hide the fact that I'm running
    freebsd.
    > Would you happen to know how they get this information? no banners
    on any services display the fact that im running freebsd so I'm
    guessing
    > its got to do with tcp/ip fingerprints. Anyway at all to hide this?
    >
    > Regards,
    >
    > --> aphex

    I'm behind a firewall system, and netcraft.com reports my OS as
    Unknown...
    With only port 80 and 443 open to the outside, it probably doesn't
    have enough info to figure out what OS I'm running.

    Try firewalling, it's a good idea anyways :)

    Now how did you fool netcraft.com into saying that you run a different
    webserver?

    Later,

    Eric

    To Unsubscribe: send mail to majordomoFreeBSD.org
    with "unsubscribe freebsd-security" in the body of the message