Hi! How can I replace User-Agent and Server headers in freeswitch? This is some kind of hardening (why tell people which version I use if the don't need to know...). Sure, I use the latest releases but I would like to hide the version I use or that I use freeswitch at all. Kind regards Kevin
Hi, FreeSWITCH is a high quality, well known and respected software, there is no need to hide the fact of using it. But you can try it by adding <param name="user-agent-string" value="_undef_"/> <param name="username" value="-"/> to your Sofia-sip profile. Regards, Alex On Fri, Nov 23, 2018 at 7:45 PM Kevin Olbrich <ko@sv01.de> wrote:
Hi!
How can I replace User-Agent and Server headers in freeswitch? This is some kind of hardening (why tell people which version I use if the don't need to know...).
Sure, I use the latest releases but I would like to hide the version I use or that I use freeswitch at all.
Kind regards Kevin
_________________________________________________________________________ Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com
-- Alex Sibyakin | Support Engineer FreeSWITCH Solutions | 17345 Civic Drive #2531 Brookfield, WI 53045 <https://maps.google.com/?q=17345+Civic+Drive+%232531+Brookfield,+WI+53045&entry=gmail&source=g> Email: alex@freeswitch.com Website: https://www.FreeSWITCH.com <https://www.freeswitch.com/> Need commercial support? Contact sales@freeswitch.com for details.
You can set: <param name="user-agent-string" value="myuseragent" /> in the sipprofile config.
Am 23.11.2018 um 09:44 schrieb Kevin Olbrich <ko@sv01.de>:
Hi!
How can I replace User-Agent and Server headers in freeswitch? This is some kind of hardening (why tell people which version I use if the don't need to know...).
Sure, I use the latest releases but I would like to hide the version I use or that I use freeswitch at all.
Kind regards Kevin
_________________________________________________________________________ Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com
Besides UA and session owner fields there are special headers, methods list, callid generation, contact field format, headers sequence and so on. So I think if somebody really wants to dig some info about your switch, there are many other ways to detect it's using FreeSwitch. пт, 23 нояб. 2018 г. в 17:44, Markus Bönke <mbodbg@gmx.net>:
You can set:
<param name="user-agent-string" value="myuseragent" />
in the sipprofile config.
Am 23.11.2018 um 09:44 schrieb Kevin Olbrich <ko@sv01.de>:
Hi!
How can I replace User-Agent and Server headers in freeswitch? This is some kind of hardening (why tell people which version I use if the don't need to know...).
Sure, I use the latest releases but I would like to hide the version I use or that I use freeswitch at all.
Kind regards Kevin
_________________________________________________________________________ Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com
_________________________________________________________________________ Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com
-- Best regards, Dmitry Sytchev, IT Engineer
That is correct, and that is intentional. There will never be away to hide all signs that you are using freeswitch. If you really feel the need to hide that, you’ll have to inspect the code and figure out the changes you need to do on your own. There are probably 100 ways I can tell you are using FreeSWITCH remotely, most have no configuration way to disable.
On Dec 9, 2018, at 5:39 PM, Dmitry Sytchev <kbdfck@gmail.com> wrote:
Besides UA and session owner fields there are special headers, methods list, callid generation, contact field format, headers sequence and so on.
So I think if somebody really wants to dig some info about your switch, there are many other ways to detect it's using FreeSwitch. пт, 23 нояб. 2018 г. в 17:44, Markus Bönke <mbodbg@gmx.net>:
You can set:
<param name="user-agent-string" value="myuseragent" />
in the sipprofile config.
Am 23.11.2018 um 09:44 schrieb Kevin Olbrich <ko@sv01.de>:
Hi!
How can I replace User-Agent and Server headers in freeswitch? This is some kind of hardening (why tell people which version I use if the don't need to know...).
Sure, I use the latest releases but I would like to hide the version I use or that I use freeswitch at all.
not to mention this is security by obscurity and that rarely if ever actually works Sent from my iPhone
On Dec 11, 2018, at 13:24, Michael Jerris <mike@jerris.com> wrote:
That is correct, and that is intentional. There will never be away to hide all signs that you are using freeswitch. If you really feel the need to hide that, you’ll have to inspect the code and figure out the changes you need to do on your own. There are probably 100 ways I can tell you are using FreeSWITCH remotely, most have no configuration way to disable.
On Dec 9, 2018, at 5:39 PM, Dmitry Sytchev <kbdfck@gmail.com> wrote:
Besides UA and session owner fields there are special headers, methods list, callid generation, contact field format, headers sequence and so on.
So I think if somebody really wants to dig some info about your switch, there are many other ways to detect it's using FreeSwitch. пт, 23 нояб. 2018 г. в 17:44, Markus Bönke <mbodbg@gmx.net>:
You can set:
<param name="user-agent-string" value="myuseragent" />
in the sipprofile config.
Am 23.11.2018 um 09:44 schrieb Kevin Olbrich <ko@sv01.de>:
Hi!
How can I replace User-Agent and Server headers in freeswitch? This is some kind of hardening (why tell people which version I use if the don't need to know...).
Sure, I use the latest releases but I would like to hide the version I use or that I use freeswitch at all.
_________________________________________________________________________ Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com
participants (6)
-
Alexey Sibyakin
-
Dmitry Sytchev
-
Ken Rice
-
Kevin Olbrich
-
Markus Bönke
-
Michael Jerris