[an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] (none) [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] (none) [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive]
 
[an error occurred while processing this directive] [an error occurred while processing this directive]
Skåne Sjælland Linux User Group - http://www.sslug.dk Home   Subscribe   Mail Archive   Forum   Calendar   Search
MhonArc Date: [Date Prev] [Date Index] [Date Next]   Thread: [Date Prev] [Thread Index] [Date Next]   MhonArc
 

Re: [SIKKERHED] Annoncere hvilket OS der køres



> On Thu, 27 May 2004 13:05:57 +0200 (CEST)
> "Kim Jensen" <sslug@sslug> wrote:
> 
> > > Heikki Levanto <sslug@sslug> writes:
> > > All in all, this sounds like security by obscurity. A bit of information
> > > hiding is all right, but nothing should depend on it.
> > >
> > Man bör ikke basere sin sikkerhed paa "security through obscurity", men
> > der er heller ingen grund til at skilte med al informationen! Apache har
> > en dejlig lille indstilling med deres "ServerTokens" tag - der kan sättes

Har fjernet versionsoplysninger. Curl viser nu ingenting.

Netcraft kan stadig finde ud af både server version og OS! De bruger
sikkert nogle andre teknikker. Her tcpdump:

/* Dette er ikke netcraft, tror jeg */
20.Red-83-35-113.pooles.rima-tde.net.3179 > d-axel.microsoft-ds:
/* her kommer netcraft */
wooster.netcraft.com.4476 > d-axel.http:

Så må jeg se om ethereal kan hjælpe med dump af de oplysninger.

13:59:36.949746 wooster.netcraft.com.4476 > d-axel.http: S 902894662:902894662(0) win 16384 <mss 1460,nop,wscale 0,nop,nop,ti
mestamp 8215575 0> (DF)

-- 
donald_j_axel snabela get2net.dk -- http://d-axel.dk/


 
Home   Subscribe   Mail Archive   Index   Calendar   Search

 
 
Questions about the web-pages to <www_admin>. Last modified 2005-08-10, 20:47 CEST [an error occurred while processing this directive]
This page is maintained by [an error occurred while processing this directive]MHonArc [an error occurred while processing this directive] # [an error occurred while processing this directive] *