[EMAIL PROTECTED] wrote: > P0f maybe? Although with my experience it has never been that accurate > and is easy to fool if one so desires. > We're using p0f integrated into Qmail-Scanner to track what OS is associated with incoming SMTP connections.
Just to add some 'facts' to this discussion, so far this week the following percentages are seen (for our mail servers) as being responsible for malware/spam 84% Windows 13% Linux 3% the rest So Linux systems can send viruses and spam - but these will be 0wned Web servers - not workstations... -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
