Quoting Peter Clark (pc451 at yahoo.com):
>    Maybe now would be a good time to ask a question that I have been
> wondering about for some time. Is there any way to have a box give a
> false identity for its OS? For example, have Linux tell the outside
> world that it is really NT4? That way, any s'kiddie that comes along
> with his arsenal of l33t cracks sees, "Oh! NT! Let me try this..." and
> gives the sysadmin something to chuckle about in the syslog.
>    Is this even remotely a good idea? Of course, you wouldn't want to
> build your entire defense around it, but just as an additional measure
> to throw kiddies off. Or would it cause too many problems for regular
> operations? I can't imagine that it would be too much of a problem for
> a single computer connected to the net, such as mine. RFC, please.

Go to google. Look for honeypot, articles are there.

Also, google again, nmap, read about OS finger printing.

-- 
Bob Tanner <tanner at real-time.com>       | Phone : (952)943-8700
http://www.mn-linux.org                 | Fax   : (952)943-8500
Key fingerprint = 02E0 2734 A1A1 DBA1 0E15  623D 0036 7327 93D9 7DA3

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 232 bytes
Desc: not available
Url : http://shadowknight.real-time.com/pipermail/tclug-list/attachments/20010427/840ee65c/attachment.pgp