From denial-of-service attacks to buffer overflows, Solaris security is a hot topic for all admins. Here is a way to make sure your Solaris implementation of TCP/IP does not reveal details about your release level (2.6, 7, 8) of Solaris:
# su -
# vi /etc/default/inetinit
Set the value here to 2, the RFC 1948 sequence number standard; reboot your server.
This algorithm will make sure that hackers and DDoS attackers cannot gather information about the operating system of your server by way of you TCP/IP implementation.
telnet $host_name
# su -
# vi /etc/default/inetinit
(Change 1 to 2)
:wq!
# shutdown -g0 -i6 -y
/p
Requires Free Membership to View
SearchSecurity.com members gain immediate and unlimited access to breaking industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.com today!
Michael S. Mimoso, Editorial DirectorThis was first published in June 2002