Block OS fingerprinting on Linux/UNIX systems

When an attacker attempts to penetrate a targeted Linux/UNIX system, the first task involved is usually to discover which OS the system is running and then compromise it with known exploits. If you can thwart an attacker from identifying the OS, then you can make it much harder and more time-consuming for the attacker to compromise the system. One of the most popular tools for revealing the OS is Nmap. This sample hack from O'Reilly's Network Security Hacks shows how to effectively block Nmap from "fingerprinting" a Linux/UNIX system.



Title: Network Security Hacks
ISBN: 0596006438
Published: April 2004
Author: Andrew Lockhart
Chapter: Hack 86: Write Your Own Snort Rules
Published by O'Reilly

Special offer: If you decide that you want to buy the whole book, you can save over 20% when you purchase the Network Administrator Hacks Pack, which includes Network Security Hacks along with Windows XP Hacks and Windows Server Hacks.