CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

How to hide OS & IGMP from scanning

 
Post new topic   Reply to topic       All -> FavForums -> Firewalls [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
IP: 217.227.*.*

Guest






PostPosted: Thu Oct 02, 2003 11:34 pm    Post subject: How to hide OS & IGMP from scanning
Reply with quote

short question: how can I prevent that somebody can see my OS and referrer when scanning me ?
I purchased blackice firewall and allready fugured out how to hide your computer name and your services you are running but still dont know how to do the thing I mentioned already AND how to block IGMP packets.
any ideas? please answer back Razz

Back to top
BillC

Captain
Captain
Premium Member

Joined: Jun 25, 2003
Posts: 456

MVP Premium

PostPosted: Fri Oct 03, 2003 12:50 am    Post subject:
Reply with quote

By default, BlackICE does not block ICMP traffic. But, certain statements can be manually added to the firewall.ini file to block certain types of ICMP messages. You can look here for more info.

As far has hiding your OS, I'm not sure that can be done but it is probably not a big security risk if your firewall is effective in every other area. Anyway, that's my view. Wink

Back to top
View users profile Send private message Visit posters website
Jamming

Colonel
Colonel
Premium Member

Joined: Jun 22, 2002
Posts: 1874

Premium

PostPosted: Fri Oct 03, 2003 5:14 am    Post subject:
Reply with quote

Something that would block your referrer like Proxomitron will work.

Back to top
View users profile Send private message
IP: 217.81.*.*

Guest






PostPosted: Fri Oct 03, 2003 11:50 am    Post subject:
Reply with quote

yes thanks proxomitron works great i can even use my own OS description and referrer Very Happy
but its not longer developed Crying or Very sad
I found this two registry setting on the net and im not sure if they are disabling IGMP or not.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters]
"EnableICMPRedirect"=dword:00000000
"IGMPLevel"=dword:00000000

Thanks for the IIS advice it works Very Happy

Back to top
NIN9

Cadet
Cadet


Joined: Oct 03, 2003
Posts: 1
Location: Germany

PostPosted: Fri Oct 03, 2003 8:17 pm    Post subject:
Reply with quote

btw i registered now Very Happy

Back to top
View users profile Send private message Send email Visit posters website
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Firewalls All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer