Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 173603 - mail-filter/amavisd-new - p0f-analyzer init.d script
Summary: mail-filter/amavisd-new - p0f-analyzer init.d script
Status: CONFIRMED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Linux
: High enhancement with 1 vote (vote)
Assignee: Antivirus Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2007-04-06 22:10 UTC by steveb
Modified: 2018-10-14 11:59 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
init.d\p0f-analyzer (p0f-analyzer,1.59 KB, text/plain)
2007-04-06 22:11 UTC, steveb
Details
conf.d\p0f-analyzer (p0f-analyzer,23 bytes, text/plain)
2007-04-06 22:13 UTC, steveb
Details

Note You need to log in before you can comment on or make changes to this bug.
Description steveb 2007-04-06 22:10:48 UTC
I created a small init.d script to be included into Amavisd-new. The script queries data collected from p0f. The result is a X-header line inserted by Amavisd-new. For example:
X-Amavis-OS-Fingerprint: Linux 2.4-2.6 (up: 5465 hrs), (distance 7, link:
	ethernet/modem), [xxx.xxx.xxx.xx]

This can be enabled by running the attached init.d script and changing Amavis configuration to include:
$os_fingerprint_method = 'p0f:127.0.0.1:2345';  # query p0f-analyzer.pl

Reproducible: Always
Comment 1 steveb 2007-04-06 22:11:57 UTC
Created attachment 115610 [details]
init.d\p0f-analyzer
Comment 2 steveb 2007-04-06 22:13:16 UTC
Created attachment 115611 [details]
conf.d\p0f-analyzer
Comment 3 Cyril Jaquier 2008-10-07 20:15:27 UTC
Exactly what I was looking for. Thank you.
Comment 4 Thomas Raschbacher gentoo-dev 2018-10-14 11:59:42 UTC
Hmm I haven't used this in years .. I'll see if i can set up some kind of test environment to give it a spin. but no promises how long (i know this is an old bug)