On 2018-02-28 10:57, G.W. Haywood via bind-users wrote:
Hi there,
On Wed, 28 Feb 2018, (Ing. Pedro Pablo Delgado Martell) wrote:
Good morning, I'm trying to make it more difficult for an attacker to
get my DNS server version.
Waste of time. The attacks are automated, and will be mounted anyway.
Indeed. At least one of my legacy servers returns "4.9.4-P1-Would you
believe Win98SE?", which was an in-joke at the time but I like it well
enough that it is still here 10+ years later.
I've still seen modern attacks. As you say, the attacks are automated
and there is no real advantage in checking versions first, it is easier
to just throw everything at everyone.
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
