From owner-freebsd-security  Tue Nov 27 23: 1:50 2001
Delivered-To: freebsd-security@freebsd.org
Received: from flood.ping.uio.no (flood.ping.uio.no [129.240.78.31])
	by hub.freebsd.org (Postfix) with ESMTP id C3C0937B405
	for <freebsd-security@FreeBSD.ORG>; Tue, 27 Nov 2001 23:01:47 -0800 (PST)
Received: by flood.ping.uio.no (Postfix, from userid 2602)
	id 8FD0014C54; Wed, 28 Nov 2001 08:01:46 +0100 (CET)
X-URL: http://www.ofug.org/~des/
X-Disclaimer: The views expressed in this message do not necessarily
  coincide with those of any organisation or company with
  which I am or have been affiliated.
To: "Bara Zani" <bara_zani@yahoo.com>
Cc: <freebsd-security@FreeBSD.ORG>
Subject: Re: freebsd 4.4 finger tips ?
References: <009c01c176e1$9025f390$6e00a8c0@kushkush>
From: Dag-Erling Smorgrav <des@ofug.org>
Date: 28 Nov 2001 08:01:46 +0100
In-Reply-To: <009c01c176e1$9025f390$6e00a8c0@kushkush>
Message-ID: <xzpadx7bcpx.fsf@flood.ping.uio.no>
Lines: 11
User-Agent: Gnus/5.0808 (Gnus v5.8.8) Emacs/20.7
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

"Bara Zani" <bara_zani@yahoo.com> writes:
> ipfilter is configured to allow only ssh and https in from tun0 .
> never the less nmap will identify the os as freebsd 4.something .
> how can i erase the finger tips ?

Try blocking TCP segments that have both the SYN and the FIN flags
set.

DES
-- 
Dag-Erling Smorgrav - des@ofug.org

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message