grsecurity forums

i just found a strange prob with netcraft
when you check the first time it says "unknown" - but after 1-2 days it says "linux"

you can also see it here:

devel.grsecurity.net
http://uptime.netcraft.com/up/graph/?mo ... it=Examine

any ideas?


thanks for this cool patch

are you talking about your own server? The best way to hinder the os detection is to use the stealth iptables module i provide with grsecurity. Many of the techniques used in os fingerprinting depend on you sending a reply back that it can analyze.

check the date on the devel.grsecurity.net one, it hasn't been updated since november of 2001.

here's the one for grsecurity.net:

http://uptime.netcraft.com/up/graph/?mo ... it=Examine

it keeps switching back and forth from unknown to solaris

-Brad

thanks for your reply

yes i talk about my own server - it switched to linux after 2 days. i thaught its the same on devel.grsecurity, because it looks very similar to my netcraft history.

instead of blocking all outgoing traffic, it want to find out what netcraft exactly is using to detect the os.

i'll keep you updated if i find a working solution (without stealth). possibly you can use this for a new grsecurity feature