On 2014-02-09 18:24, Jim Klimov wrote: > Hello all, > > FYI: for milter-greylist users who (want to) use p0f fingerprinting > and run under a Solaris-based OS. Also some fixes/improvements were desired on the milter-greylist side. I attached here the following: * in the debug logs, don't just state the p0f query results, but do also report the IP address they pertain to - helps debugging a lot ;) * try to reconnect to p0f once if "write failed" or "read failed", instead of bailing out immediately so that no p0f processing is done for this connection (i.e. if p0f daemon restarted) * if the remote host is missing in the p0f cache, do a few retries, perhaps its packets will soon be processed by the daemon and show up. NOTE that this blocks milter-greylist until the loop completes and in case of at least Sendmail, this delays even the display of the SMTP banner. * the clumsy part I need help with: configuration of the delay and count for the retry loop above. For some reason, my build refused to process the p0f_miss_retry_count and p0f_miss_retry_delay variables in the config file :( Possibly a late-night silly typo somewhere? Thanks, //Jim Klimov
Message
Re: [milter-greylist] milter-greylist and p0f - integration with Solaris
2014-02-10 by Jim Klimov
Attachments
- No local attachments were found for this message.