Aaron Dalton <[EMAIL PROTECTED]> writes:

> I've read a number of times that people hide their ssh version string so that 
> attackers don't know what version you are running.  I've read the 
> documentation and can't seem to figure out how to do this.  Can somebody 
> explain to me how this is done?  Thank you so much!

I don't recommend anyone actually do this, because 
 
 a) it serves no purpose (it certainly doesn't make you any more
    secure, or even discourage any attackers)

 b) The version string is a part of the protocol itself, required by
    the protocol specification

 c) you will be making life harder for auditors, system
    administrators, and so 

If you're really determined, though, the strings are defined in
/usr/src/crypto/openssh/version.h 
_______________________________________________
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to