RE: FTP and HTTP Header Removal

[Chris Bipes <chris.bipes@xxxxxxxxxxxxxxx>]

Have your fire wall mask them.  PIX firewall masks the e-mail server header
and I wonder if it also does the http/https headers as well.  Hmm I will
have to test that.

Christopher K. Bipes      mailto:Chris.Bipes@Cross-Check.com
Operations & Network Mgr  mailto:Chris_Bipes@Yahoo.com
CrossCheck, Inc.          http://www.cross-check.com
6119 State Farm Drive     Phone: 707 586-0551 x 1102
Rohnert Park CA  94928    Fax: 707 586-1884


-----Original Message-----
From: Haase, Justin C. [mailto:Justin.Haase@Kingland.com]
Sent: Thursday, September 05, 2002 8:46 AM
To: 'midrange-l@midrange.com'
Subject: RE: FTP and HTTP Header Removal

The HTTP/FTP headers is something which we identified on an internal
security audit which would be a good idea to perform - that way if some
FREAK comes in and decides to mess around, they won't know what type of
server they're hitting w/o doing some serious work.