Luc,
> Did someone got the new p0f feature in 2.4.0 running?
> I added the line $os_fingerprint_method = 'p0f:127.0.0.1:2345'; to
> amavisd.conf checked the network settings in the p0f-analyzer and
> started p0f -l 'tcp dst port 25' 2>&1 | p0f-analyzer.pl 2345
>
> amavisd debug-sa says OS_Fingerprint code loaded
>
> When looking with strace to the p0f-analyser.pl process, there is some
> activity.
>
> In /etc/mail/spamassassin/local.cf I added the lines like suggested in
> the RELEASE_NOTES.
>
> When I get some SPAM, X-Spam-Status does not report any OS, there is
> also no X-Amavis-OS-Fingerprint in the header
The X-Amavis-OS-Fingerprint header field is only seen by SA,
it does not get into final forwarded message.
To receive any scores based on it, add rules to SA 9local.cf),
like the ones suggested in the release notes. Triggered SA rules
would be seen in the log in the list of triggered SA rules.
To verify that it works, the following egrep on the log level 5 log could
reveal relevant entries:
egrep 'Fingerprint collect: |OS_fingerprint: |suppressed for mail from
Windows|P0F' \
/var/log/amavisd-debug.log
Mark
-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
