173603 – mail-filter/amavisd-new - p0f-analyzer init.d script

Bug 173603 - mail-filter/amavisd-new - p0f-analyzer init.d script

Summary: mail-filter/amavisd-new - p0f-analyzer init.d script

Status:	CONFIRMED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Current packages (show other bugs)
Hardware:	All Linux

Importance:	High enhancement with 1 vote (vote)
Assignee:	Antivirus Team

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2007-04-06 22:10 UTC by steveb
Modified:	2021-08-06 04:23 UTC (History)
CC List:	5 users (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
init.d\p0f-analyzer (p0f-analyzer,1.59 KB, text/plain) 2007-04-06 22:11 UTC, steveb	Details
conf.d\p0f-analyzer (p0f-analyzer,23 bytes, text/plain) 2007-04-06 22:13 UTC, steveb	Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description steveb 2007-04-06 22:10:48 UTC

I created a small init.d script to be included into Amavisd-new. The script queries data collected from p0f. The result is a X-header line inserted by Amavisd-new. For example:
X-Amavis-OS-Fingerprint: Linux 2.4-2.6 (up: 5465 hrs), (distance 7, link:
	ethernet/modem), [xxx.xxx.xxx.xx]

This can be enabled by running the attached init.d script and changing Amavis configuration to include:
$os_fingerprint_method = 'p0f:127.0.0.1:2345';  # query p0f-analyzer.pl

Reproducible: Always

Comment 1 steveb 2007-04-06 22:11:57 UTC

Created attachment 115610 [details]
init.d\p0f-analyzer

Comment 2 steveb 2007-04-06 22:13:16 UTC

Created attachment 115611 [details]
conf.d\p0f-analyzer

Comment 3 Cyril Jaquier 2008-10-07 20:15:27 UTC

Exactly what I was looking for. Thank you.

Comment 4 Thomas Raschbacher gentoo-dev

2018-10-14 11:59:42 UTC

Hmm I haven't used this in years .. I'll see if i can set up some kind of test environment to give it a spin. but no promises how long (i know this is an old bug)