From owner-freebsd-security  Fri Mar 15 18:39:17 2002
Delivered-To: freebsd-security@freebsd.org
Received: from db.nexgen.com (db.nexgen.com [66.92.98.149])
	by hub.freebsd.org (Postfix) with SMTP id 7077937B41C
	for <freebsd-security@FreeBSD.ORG>; Fri, 15 Mar 2002 18:39:00 -0800 (PST)
Received: (qmail 88414 invoked from network); 16 Mar 2002 02:41:32 -0000
Received: from localhost.nexgen.com (HELO alexus) (root@127.0.0.1)
  by localhost.nexgen.com with SMTP; 16 Mar 2002 02:41:32 -0000
Message-ID: <001701c1cc93$ba83e770$0100a8c0@alexus>
From: "alexus" <ml@db.nexgen.com>
To: "Garrett Wollman" <wollman@lcs.mit.edu>
Cc: <freebsd-security@FreeBSD.ORG>
References: <OFB285D2C2.309E2F56-ON87256B7D.0074468F@tsainc.com><5.1.0.14.0.20020315153913.061b8ea8@pop3s.schulte.org><005a01c1cc79$307ea5c0$0100a8c0@alexus> <200203152353.g2FNrmt99923@khavrinen.lcs.mit.edu>
Subject: Re: openssh
Date: Fri, 15 Mar 2002 21:38:59 -0500
MIME-Version: 1.0
Content-Type: text/plain;
	charset="Windows-1252"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

I wasn't aware of that banner is part of the protocol.

the only reason i wanted it to be removed is due to when scaners scan my box
they saying that my box is vulnerable due to it runs 2.9.x instead of latest
3.1.x, and sine i run -STABLE i'm pretty much sure that there is no
vulnerabilty there.

----- Original Message -----
From: "Garrett Wollman" <wollman@lcs.mit.edu>
To: "alexus" <ml@db.nexgen.com>
Cc: <freebsd-security@FreeBSD.ORG>
Sent: Friday, March 15, 2002 6:53 PM
Subject: Re: openssh


> <<On Fri, 15 Mar 2002 18:29:01 -0500, "alexus" <ml@db.nexgen.com> said:
>
> > I understand that changing banner won't increase any security, i'm
asking if
> > it's possible to remove it at all, I do not want for this banner to be
> > appear at all, period.
>
> Then don't run an SSH server.  The banner is part of the protocol.
>
> -GAWollman
>
> --
> Garrett A. Wollman   | O Siem / We are all family / O Siem / We're all the
same
> wollman@lcs.mit.edu  | O Siem / The fires of freedom
> Opinions not those of| Dance in the burning flame
> MIT, LCS, CRS, or NSA|                     - Susan Aglukark and Chad
Irschick
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message