I thought I had p0f working, but I’m seeing this in the logs: Apr 7 15:25:13 planx milter-greylist: p0f reply id mismatch 0 expected 2db21 Apr 7 15:25:18 planx milter-greylist: t37FPDKr005463: addr [185.32.183.11][185.32.183.11] from <Topdollar4homes@...> to <idbill@...> blacklisted (ACL 1654) yet, it appears p0f is actually working... [root@planx ~]# ~idbill/p0f-client /var/run/p0f 185.32.183.11 First seen = 2015/04/07 15:25:13 Last update = 2015/04/07 15:25:13 Total flows = 1 Detected OS = Linux 3.1-3.10 HTTP software = ??? Network link = Ethernet or modem Language = ??? Distance = 10 Uptime = 0 days 6 hrs 32 min (modulo 49 days) Could this be a backward compatibility issue with p0f v2 and v3 in relation to filter-greylist? Bill
Message
p0f...?
2015-04-07 by Bill Levering
Attachments
- No local attachments were found for this message.