Ken,

> I've also implemented Passive OS Fingerprinting using the instructions
> written by Mark and have been pleased with P0Fs contributions.
> It seems to me that P0F would be more valuable if it could discern
> between a desktop OS and a server.  On my system anyway, P0F appears to
> lump Windows 2000, Windows XP and Windows Server 2003 all together.  Is
> it possible for P0F to distinguish between Windows XP and Windows Server
> 2003 IP stacks?  That would be very helpful.
> ... I don't have a clue what all of the numbers following "UNKNOWN" mean.

This will need to be directed to the author/maintainer of p0f.
Amavisd is just a messanger here, copying whatever comes out of p0f.

> Also, I noticed SPAM slipping by originating from The Bat! and that P0F
> did not recognize the IP stack signatrure.  I don't know much about The
> Bat! except that it is frequently used to send mass e-mailings.  What OS
> does The Bat! run under?  Does it include it's own IP stack?  If a P0F
> signature can be developed for Thhe Bat!, I would think that would be
> helpful too.

Don't know. Perhaps somebody else can answer.

  Mark

-------------------------------------------------------------------------
SF.Net email is sponsored by:
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services
for just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to