PDA

View Full Version : Block And Fool OS Fingerprinting Scanner


Jericho
27th October 2004, 07:26 PM
Hi .....

can everyone tell me, How To Block And Fool OS Fingerprinting Scanner in Fedora core 2 ?? .... yes, I have read the o'reilly book about it but the discusion in this book is about block os fingerprinting attempts with OpenBSD's PF.

Quella
27th October 2004, 07:54 PM
Are you attempting to block such attempts on your firewall or packet filter, or a DMZ or external server? Are you looking to do this just to present fake data back to the scanning tool? Many of these tools examine the various implementation of the TCP/IP stack and compare them to a database of stack responses. So you would either have to redesign some of the responses from the stack, or use some tool to block such scans from being used, and I'm not sure if anything exists to do the second one. It may not be worth your troubles in the long run. Just my 2 cents.

Quella