On Sat, Mar 22, 2008 at 11:14:28PM -0300,
=?ISO-8859-1?Q?Daniel_Dias_Gon=E7alves_ wrote:
> Which methods used to prevent OS detection and uptime
(nmap) ?
> ht
tp://nmap.org/misc/defeat-nmap-osdetect.html#BSD
> I tried, but not work.
The TCP Drop SYN+FIN sysctl might help.
% sysctl -d net.inet.tcp.drop_synfin
net.inet.tcp.drop_synfin: Drop TCP packets with SYN+FIN set
Regards.
--
Rui Paulo
_______________________________________________
freebsd-pf freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to
"freebsd-pf-unsubscribe freebsd.org"
|