On Tue, Mar 25, 2003 at 09:44:02PM +0100, Johan Brunius wrote:
> Michael Scheidell <[EMAIL PROTECTED]> writes:
> >> Hello all,
> >> I've been getting false negatives against frontpage servers. I've
> >modified
> >> Renaud's frontpage.nasl (attached). I've removed the dependency on
> >> "script_require_keys("www/iis");", since so many servers now just belch
> >out
> >
> >or we could just turn off 'optimise tests'
> >
> >There are lots of tests that look for www/iis.
>
> I agree, the correct way is not to change anything in the plugin, the
> correct way is to turn off optimise tests.
Actually, in that case, it turns out that frontpage can run on top of
apache, so the optimization is wrong.
Optimizations should "fail" when nessus scans a host whose banner has
been deliberately modified (ie: Apache advertising to be IIS). However,
in normal conditions, they should not.
