Re: fooling nmap

[CyberPsychotic <mlists () gizmo kyrnet kg>]

~ > would identify an nmap scan, the type of scan, the version of nmap, the OS the
~ > scan was run from, etc.
~ 
~ Marty Roesch and Fyodor are competing on this one. 

I dont think we really try to compete with Fyodor's nmap, but flexresp
feature is quite funky thing to confuse nmap probes too. You need to to
`fix' your kernel though to not to respond these itself. (that's what is
being looked into too to make it automagically.. heh heh..)


-F

--
fygrave () tigerteam net                http://www.kalug.lug.net