I added experimental p0f suport in CVS version.
To enable it, configure --enable-p0f
In your configuration file, you need something like this:
p0fsock "/var/run/p0f.sock"
racl greylist p0f /Windows/ delay 12h
racl greylist default delay 15m
p0f clauses accept quoted string (case insensitive substring match),
regex, and you can make lists of it.
This has not been tested, so experiment at your own risk. Feedback is
welcome.
Thanks very much for writing this.
Can you add a README.p0f with suggested invocations of p0f, and a few more rules?
I have built this, and see p0f symbols in my binary, but it's choking on
the example you posted.
I tried your example, but it failed with complaints about / and I then did
p0fsock "/var/run/p0f.sock"
racl greylist p0f "Windows" delay 600m autowhite 2400m
and now milter-greylist seems to be exiting silently.
To enable it, configure --enable-p0f
In your configuration file, you need something like this:
p0fsock "/var/run/p0f.sock"
racl greylist p0f /Windows/ delay 12h
racl greylist default delay 15m
p0f clauses accept quoted string (case insensitive substring match),
regex, and you can make lists of it.
This has not been tested, so experiment at your own risk. Feedback is
welcome.
Thanks very much for writing this.
Can you add a README.p0f with suggested invocations of p0f, and a few more rules?
I have built this, and see p0f symbols in my binary, but it's choking on
the example you posted.
I tried your example, but it failed with complaints about / and I then did
p0fsock "/var/run/p0f.sock"
racl greylist p0f "Windows" delay 600m autowhite 2400m
and now milter-greylist seems to be exiting silently.