VPN & Proxy Detection, Browser Spoof Detection using TCP

[@NasterXchange]

Originally Posted by Mayhard

Fixed Passive OS Fingerprints issue too!

Would you mind sharing how you fixed it?

[nate]

I haven't even been able to replicate the mis-matched OS finger prints. So I cant even break it to fix it...

But the rest I've worked through ages ago..

To fix the MTU issue just add

-mssfix max

to the OVPN client config...

If your using SoftEther disable UDP Acceleration in Advanced settings on the client.

But the best way with SoftEther, if your building and running your own VPN's on VPS, is to use a Bridged connection instead of enabling SecureNAT. Use dnsmasq for dhcp and use iptables to do the routing and forwarding.

To fix the ping issue just drop ICMP requests with iptables on the server.

iptables -A INPUT --proto icmp -j DROP

[Mayhard]

Originally Posted by @MasterNaster

Would you mind sharing how you fixed it?

By modifying OS kernel

[nate]

Originally Posted by Mayhard

By modifying OS kernel

What is leaking the mis-matched OS? VMware? VPS running proxie? or VPS running VPN?

I'm guessing its a KVM VPS running proxie since its the only thing I havent tried to recreate the issue. I've never tried to built a proxie before.

Sounds like you've come a long way @Mayhard. Good job bro. Sh!ts fulfilling isnt it. Problem solving like that in shell or cmd line.

I know for fact its impossible to run your own kernel on a OpenVZ guest (VPS). I tried a while back while trying to tunnel dual stack IPv4 & IPv6 through VPN since ip6tables NAT isn't available on OEM OpenVZ kernel. The way OpenVZ works you share the hosts kernel, so I would assume with 99% assurity its impossible to modify the kernel as well since the guest doesn't have assess to the hosts kernel.

KVM is another beast entirely. You can run your own custom kernel on a KVM guest. If your building your own VPN's ect... KVM is the way to go if you can find them at the right price. ( < $15 per-year )

[comeback7]

hi iloveghosts , sorry to bother you , i am interested in this topic
TCP Fingerprint Spoofing , but no one seems to notice it , hope you can give me some advice