Blocking version information

Vinny Abello vinny at tellurian.com
Sun Jun 19 16:29:59 UTC 2005


At 09:12 AM 6/19/2005, you wrote:
>On Sun Jun 19, 2005 at 00:34:03 -0400, Vinny Abello wrote:
> >
> >Sure, but if someone is skilled enough to fingerprint the name
> >server, then they deserve to know what it's running. A casual utility
> >or user won't be able to do that too easily. Apart from major
> >version, I doubt you can finger print a release down to a point
> >release. Feel free to prove me wrong. I'd be interested in how it works.
> >
>You can. Very easily.
>
>http://cr.yp.to/surveys/dns1.html
>
>And so can j. random skript kid.
>
>http://www.rfc.se/fpdns/

OK, again, apart from major version number... Everything I've seen so 
far doesn't identify an exact release. Thanks for the djb link 
though. I think I've actually seen that before, and fpdns has a wide 
margin of error for identifying a point release when I ran it.

Vinny Abello
Network Engineer
Server Management
vinny at tellurian.com
(973)300-9211 x 125
(973)940-6125 (Direct)
PGP Key Fingerprint: 3BC5 9A48 FC78 03D3 82E0  E935 5325 FBCB 0100 977A

Tellurian Networks - The Ultimate Internet Connection
http://www.tellurian.com (888)TELLURIAN

"Courage is resistance to fear, mastery of fear - not absence of 
fear" -- Mark Twain



More information about the bind-users mailing list