Daryl, > Yeah, but I have the session info
Lucky you! But the difficulty of providing a p0f plugin for SA remains, SA can only obtain its information by parsing mail header, so there are basically just two options: - let MTA (or amavisd) insert p0f information as a header field, or - let SA plugin query a service that can supply the information based only on client IP address (which can be obtained from a header). Mark