OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Foxing NetCraft.com
From: Cody Tubbs. (pigspigsYAHOO.COM)
Date: Wed Dec 20 2000 - 02:04:03 CST

I believe I read once they find out your OS type,
etc... they store it within internal databases...
which will get updated via a new REAL scan if they get
enough requests to your domain. I have got a few scans
from the service sourced from a few ips from the same
subnet and then plugged the /24 into my firewall,.
This was two days ago, the service still shows the
information. I had also checked a few other domains
that is hosted on the same machine that I didnt check
before the firewall and the information came back
timed
out. Hope this helps.
Cody Tubbs.

--- Peter Bance <MinstrelMINSTREL.ORG.UK> wrote:
> Following on from an earlier thread about changing
> IIS banners, I did this
> quite some time ago, and NetCraft is successfully
> fooled. However, at the
> same time I also changed the DefaultTTL, but for
> some reason NetCraft are
> still able to identify the server as NT.
>
> My question: does anybody know what other parameters
> NetCraft use to identify
> Operating Systems? I'm in the unfortunate position
> of being forced to leave
> ICMP available as the ISP hosting the server demands
> it :o( Could this be
> where the information is coming from?
>
> --
> Peter Bance
> http://www.minstrel.org.uk/

__________________________________________________
Do You Yahoo!?
Yahoo! Shopping - Thousands of Stores. Millions of Products.
http://shopping.yahoo.com/