Rick Macdougall wrote:
Those who like SQL might like the stuff at <http://whatever.frukt.org/p0fstats.text.shtml> wich includes my SpamAssassin plugin. :-)
If I'm reading the docs correctly, it would not be of any use to me since spamd runs on its on separate server and p0f only supports local sockets. Correct or is there a way I could use it ?
Wich docs did you read? The stuff at the link above lets you use p0f data on one machine even if p0f is running at another machine. I belive the other plugin that someone links to also has the ability to use p0f data on another machine. this is how our setup looks: The three relevant machines are Monty: our firewall (OpenBSD) Oliver: our statistics machine (FreeBSD) Chip: our mail gateway (FreeBSD) Monty runs p0f on the Internet interface using the p0f.udpsend script to forward the p0f data to Oliver. Oliver uses the p0f.udplog script to collect the p0f data and insert it into a MySQL database. Chip uses SpamAssassin, wich uses my p0f SpamAssassin plugin to get p0f data from Oliver. Regards /Jonas -- Jonas Eckerman, FSDB & Fruktträdet http://whatever.frukt.org/ http://www.fsdb.org/ http://www.frukt.org/
