Re: [PEN-TEST] Firewalking

[honoriak <EGC () ARGEN NET>]

Pepijn Vissers wrote:

> Hi all,
>
> What would be the best way to determine what kind of firewall is running on
> a server? Especially one that does not give out any banners.
> TCP-fingerprinting is not possible because there are no obvious open ports.
>
> Any comments on this would be welcome,

visit http://www.es2.net/research/firewalk , this is an interesting project
and there you'll be able to see a good paper about it :), it's quite difficult
to explain the tecnique in a mail (you'll use traceroute to know how is the
firewall but with variations)

                -honoriak

[HeliSec inc.]

> ---
> Pepijn Vissers