Umm web servers will cough up their version numbers if prompted, too.
That's part of the header goop you get returned if a blank GET is sent.
_______________________
The opinions expressed above are my own. The facts simply are and belong to
none.
James W. Meritt, CISSP, CISA
Senior Secure Systems Engineer at Wang Government Services, Inc.
> -----Original Message-----
> From: Marc Renner [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, March 16, 2000 5:05 PM
> To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
> Subject: Re: server version number
>
>
> You mean:
>
> ftp ftp.wang.com
> Connected to dnsus1.wang.com.
> 220 dnsus1 Microsoft FTP Service (Version 4.0).
> User (dnsus1.wang.com:(none)):
>
> ??
>
> Responses to what exactly??
>
> +++++++++++++++++++++++
> Marc Renner - Director http://ci.marysville.wa.us
> Network Operations Dept. Mailto:[EMAIL PROTECTED]
> City of Marysville, Wa. (360) 651-5000
> ISSA Member # 10281 http://www.issa.org
> +++++++++++++++++++++++
>
> >>> "Meritt, Jim" <[EMAIL PROTECTED]> 03/16/00 01:56PM >>>
> Is it possible to screen out the (primarily http) server
> version numbers in
> the responses. I'm looking for any way to stop that
> information from being
> given out without having to go into the server itself and edit it out.
>
> Thanks!
>
> Jim
>
> _______________________
> The opinions expressed above are my own. The facts simply
> are and belong to
> none.
> James W. Meritt, CISSP, CISA
> Senior Secure Systems Engineer at Wang Government Services, Inc.
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
