On Fri, Jan 20, 2006 at 04:37:53AM -0800, G.Stefan wrote:
> Hello misc,
>
> What i have to do if i want to allow o n l y Windows OS to have acces
> on the internet ?
> I know that OS FINGERPRINTS can help me but how ?
>From pf.conf(5), under OPERATING SYSTEM FINGERPRINTING:
"Passive OS Fingerprinting is a mechanism to inspect nuances of a TCP con-
nection's initial SYN packet and guess at the host's operating system.
Unfortunately these nuances are easily spoofed by an attacker so the fin-
gerprint is not useful in making security decisions. But the fingerprint
is typically accurate enough to make policy decisions upon."
For more info, please see pf.conf(5), pf.os(5), pf(4), and the PF User's
Guide -- http://www.OpenBSD.org/faq/pf/index.html
