sslug-teknik team mailing list archive

[Mogens Valentin <monz@xxxxxxxxx>]

Dan Mortensen wrote:
> 1. Banner Grabbing - mine DNS'ere fortæller jo alt om dem selv når man
> får en telnet eller ftp loginprompt. Hvordan slår man det fra? Eller kan
> man ændre teksten til noget andet? Fx. skrive et komplet andet system for
> at forvirre en angriber.

I /etc/named.conf :
options {
        version "you don't need to know that";
        ...osv...
        }

Kig ozze på listen-on {} og allow-query {}.


I /etc/rc.d/rc.local  (på redhat):
    #echo "" > /etc/issue
    #echo "$R" >> /etc/issue
    #echo "Kernel $(uname -r) on $a $SMP$(uname -m)" >> /etc/issue
    #cp -f /etc/issue /etc/issue.net
    #echo >> /etc/issue
    echo -e "\nScumbag is serving...\n" > /etc/issue
    echo -e "\nGo away, just go away...\n" > /etc/issue.net

Eller slet og ret:
    echo "" > /etc/issue
    #echo "$R" >> /etc/issue
    #echo "Kernel $(uname -r) on $a $SMP$(uname -m)" >> /etc/issue
    cp -f /etc/issue /etc/issue.net
    #echo >> /etc/issue


Udover hvad andre har skrevet, så læs i man siderne til de services du
har brug for at have kørende hvordan du sætter bannertekster.
-- 
Regards,
           Mr Dev - Mogens Valentin
    http://www.mrdev.com - mrdev@xxxxxxxxx
OpenSource Security - Networking - Programming