HOW-TO: Remove FTP Server Header

["Haase, Justin C." <Justin.Haase@xxxxxxxxxxxx>]

Here's how:

Edit the message description TCP1222 in message file QTCP/QTCPMSGF.  Make
sure it has at a VERY MINIMUM '215  '

I changed mine to '215 No information is available.'

Works great when you do a SYST command to get the info.

jch

-----Original Message-----
From: Chris Bipes [mailto:chris.bipes@cross-check.com]
Sent: Thursday, September 05, 2002 11:35 AM
To: 'midrange-l@midrange.com'
Subject: RE: FTP and HTTP Header Removal


Have your fire wall mask them.  PIX firewall masks the e-mail server header
and I wonder if it also does the http/https headers as well.  Hmm I will
have to test that.

Christopher K. Bipes      mailto:Chris.Bipes@Cross-Check.com
Operations & Network Mgr  mailto:Chris_Bipes@Yahoo.com
CrossCheck, Inc.          http://www.cross-check.com
6119 State Farm Drive     Phone: 707 586-0551 x 1102
Rohnert Park CA  94928    Fax: 707 586-1884


-----Original Message-----
From: Haase, Justin C. [mailto:Justin.Haase@Kingland.com]
Sent: Thursday, September 05, 2002 8:46 AM
To: 'midrange-l@midrange.com'
Subject: RE: FTP and HTTP Header Removal

The HTTP/FTP headers is something which we identified on an internal
security audit which would be a good idea to perform - that way if some
FREAK comes in and decides to mess around, they won't know what type of
server they're hitting w/o doing some serious work.
_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
or email: MIDRANGE-L-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.