Mark Martinec wrote:
Daryl,
Yeah, but I have the session info
Lucky you! But the difficulty of providing a p0f plugin for SA
Luck of the Irish Mark! :)
remains, SA can only obtain its information by parsing mail header,
so there are basically just two options:
- let MTA (or amavisd) insert p0f information as a header field, or
- let SA plugin query a service that can supply the information
based only on client IP address (which can be obtained from a header).
I was just wondering if anybody had actually got the inbuilt caching
server of p0f to work. Nothing against your wrapper, honest!
I actually do the same thing with my Sendmail milter... pass the session
data to SA in a header field. I would just rather query p0f directly
for the info rather than have it running in my wrapper. The savings are
nearly non-existent, but hey, you get to cut one process out of the picture.
Daryl
