Re: Basspro web site

There are various ports to which icmp can be issued, which will tell
information about your OS... some of which you may not want shared.

For example, using icmp (the ping protocol), a person may find that you're
running WINNT, and armed with that information an attacker can then
customize attacks, limiting to only those things NT is vulnerable for.
(OK, well, NT is vulnerable for just about anything, but you know what I
mean. :)

Anyway, it's best to firewall your ICMP responses, limiting to only those
that are required by your network (usually ports 0 and 8 if I recall
correctly - please check this; don't blindly accept.).

Naturally, if ICMP ports that identify OS are disabled, then no tool
(including netcraft's) can determine your OS.

HTH
Dennis






Eric Lehti <Eric.Lehti@amb-adv.com>@midrange.com on 12/06/2002 01:24:11 AM

Please respond to midrange-l@midrange.com

Sent by:    midrange-l-admin@midrange.com


To:    midrange-l@midrange.com
cc:
Subject:    Basspro web site


Hello Paul,
I used the Examine tool at www.netcraft.com  (click on 'What's that site
running?' and enter www.basspro.com.)
After it examines your webserver, scroll down the page.
It says you are running Apache on an unknown server.  But in October of
2000, you were running IBM HTTP Server 1.0  I find it odd that netcraft
cannot determine your server.  It does a good job examining
www.ibmuser.com.  Compare yours to that.

Examine www.cpukc.org  (our user group).  It is running on an iSeries model
270 in a Linux partition, but netcraft cannot see our iSeries.  Odd.
Eric.Lehti@amb-adv.com