Sven Schuster wrote:
sorry to get more OT here, but may I ask two questions regarding
p0f, as we seem to some knowledgable people here :-)
1. does anybody know if there are any problems regarding running
the mail server with p0f behind a Cisco PIX firewall?? I have two
locations (where I just wanted to do some fingerprint logging for now)
where I only get "UNKNOWN" in the p0f logs...on the other hand,
connecting from the local net (no firewall in between) gives me
correct results in the logs...could there be some options on the
pix to twiddle to turn off some kind of traffic normalization??
I don't have a real answer except to say that I have the same problem behind a PIX, so it is not
just you.
