From owner-freebsd-security  Sat Jul  7  4:10:18 2001
Delivered-To: freebsd-security@freebsd.org
Received: from pkl.net (spoon.pkl.net [212.111.57.14])
	by hub.freebsd.org (Postfix) with ESMTP id 701AA37B405
	for <security@FreeBSD.ORG>; Sat,  7 Jul 2001 04:10:15 -0700 (PDT)
	(envelope-from rich@rdrose.org)
Received: from localhost (rik@localhost)
	by pkl.net (8.9.3/8.9.3) with ESMTP id MAA12802
	for <security@FreeBSD.ORG>; Sat, 7 Jul 2001 12:10:14 +0100
Date: Sat, 7 Jul 2001 12:10:14 +0100 (BST)
From: rich@rdrose.org
X-Sender: rik@pkl.net
To: security@FreeBSD.ORG
Subject: Re: Hiding Versions
In-Reply-To: <200107070319.UAA11446@user7.hushmail.com>
Message-ID: <Pine.LNX.4.21.0107071207150.12764-100000@pkl.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

On Fri, 6 Jul 2001 appleseed@hushmail.com wrote:
> I've never had nmap verify the OS of a system based on this
> setup. Ever.

Would it be of any help in confusing nmap (and the like) to add rules such
as:
block return-rst in log quick on tun0 proto tcp all flags FUP
block return-rst in log quick on tun0 proto tcp all flags FSRPAU

or am i fooling myself?

rik



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message