From owner-freebsd-questions  Wed Sep 20  6:23:58 2000
Delivered-To: freebsd-questions@freebsd.org
Received: from draenor.org (draenor.org [196.36.119.129])
	by hub.freebsd.org (Postfix) with ESMTP id 30F6A37B43C
	for <questions@freebsd.org>; Wed, 20 Sep 2000 06:23:52 -0700 (PDT)
Received: from marcs by draenor.org with local (Exim 3.16 #1)
	id 13bjqi-000PYM-00; Wed, 20 Sep 2000 15:23:44 +0200
Date: Wed, 20 Sep 2000 15:23:44 +0200
From: Marc Silver <marcs@draenor.org>
To: Daan Franke <daan@websilon.nl>
Cc: "'questions@freebsd.org'" <questions@freebsd.org>
Subject: Re: TCP/IP fingerprint masqing
Message-ID: <20000920152344.L94643@draenor.org>
References: <3182D9D293F2D211B15A00500416D4902E1596@baco.websilon.nl>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <3182D9D293F2D211B15A00500416D4902E1596@baco.websilon.nl>; from daan@websilon.nl on Wed, Sep 20, 2000 at 02:54:34PM +0200
X-Operating-System: FreeBSD 4.1-STABLE
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Hi there,

Taken from LINT:

# TCP_DROP_SYNFIN adds support for ignoring TCP packets with SYN+FIN.
# This prevents nmap et al. from identifying the TCP/IP stack, but
# breaks support for RFC1644 extensions and is not recommended for web
# servers.

Cheers,
Marc

On Wed, Sep 20, 2000 at 02:54:34PM +0200, Daan Franke wrote:
> Hi,
> 
> I am wondering, is it possible to change the tcp/ip fingerprint of a fbsd
> box, with tools or some cool kernel option.
> 
> This would help me out.
> 
> Thanks.
> 
> Daan Franke
> System Engineer


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message