Hello,
today I started to look a bit deeper into p0f(1) and p0f-analyzer.pl.
Now I expected amavisd to output either some logging or some
X-Amavis-OS-Fingerprint header. But - nothing.
+--------
| # file amavisd.conf:
| $os_fingerprint_method = 'p0f:127.0.0.1:2345';
| $log_level = 5;
+--------
(if I change log_level I get different outputs, which tells me I am
modifying the right config file)
+-------
| [EMAIL PROTECTED]:~]# nc -u localhost 2345
| 211.187.225.233 1234
| 211.187.225.233 1234
| Windows XP SP1+, 2000 SP3, (distance 15, link: ethernet/modem)
+-------
means: p0f daemon works, p0f-anaylzer.pl, too
+-------
| [EMAIL PROTECTED]:/home/robtone]# grep -i "(p0f|fingepr|2345)"
/var/log/debug.log /var/log/maillog /var/log/messages
| [EMAIL PROTECTED]:/home/robtone]#
+-------
I have no %allowed_added_header_fields in my config defined.
I have no messages flagged with the header, nor anything in log.
How do I determine whether and when amavis uses the passive OS fingerprinting?
How do I enforce it?
--
Robert Felber (PGP: 896CF30B)
Munich, Germany
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
