I'm in favor of the following: Honesty. Publish what you have. If you must, lie. Publish an version that "blends" with the prevaling landscape if you must. Such behaviour is wrong and may lead to further probes since the reported version and the server behaviour don;t jibe. I'm never in favor of "boasts" or "taunts". That is tantamount to asking for further investigation. Blocking queries leads to a false sense of security. Someone will figure out what your running anyway. -------

Bill - just a quick question about your post today (pasted below). You're hinting at what might be a more prudent thing to do, but I'm not getting the hint.

Would you rather deny the version.bind query, give an intriguing answer (e.g. "bad-ass-bind"), an intentionally misleading answer (e.g. 4.8.1 or 9.5.6), or what?

----