On Wed, 19 May 2010, Mark Martinec wrote:
> Andy,
>
> > Are the sample rules in the release notes still the preferred p0f ruleset
> > for SA?
>
> Yes, still valid. It's pretty much what I'm using at our site.
>
> The IP distance (hop count) rules may need tweaking if your site
> is close to
Andy,
> Are the sample rules in the release notes still the preferred p0f ruleset
> for SA?
Yes, still valid. It's pretty much what I'm using at our site.
The IP distance (hop count) rules may need tweaking if your site
is close to poorly policed ISPs, but it works well in our academic
networks
Hi there,
Are the sample rules in the release notes still the preferred p0f ruleset
for SA?
Does anybody have any comments or experiences? We're in the process of
upgrading amavisd-new, and want to take this opportunity to utilize this
additional tool.
Thanks,
Andy
---
Andy Dills
Xecunet, I