Yahoo Groups archive

Milter-greylist

Index last updated: 2026-04-28 23:32 UTC

Message

Re: [milter-greylist] milter-greylist and p0f - integration with Solaris

2014-02-10 by Jim Klimov

On 2014-02-09 18:24, Jim Klimov wrote:
> Hello all,
>
> FYI: for milter-greylist users who (want to) use p0f fingerprinting
> and run under a Solaris-based OS.

Also some fixes/improvements were desired on the milter-greylist side.

I attached here the following:
* in the debug logs, don't just state the p0f query results, but do
   also report the IP address they pertain to - helps debugging a lot ;)
* try to reconnect to p0f once if "write failed" or "read failed",
   instead of bailing out immediately so that no p0f processing is done
   for this connection (i.e. if p0f daemon restarted)
* if the remote host is missing in the p0f cache, do a few retries,
   perhaps its packets will soon be processed by the daemon and show up.
   NOTE that this blocks milter-greylist until the loop completes
   and in case of at least Sendmail, this delays even the display
   of the SMTP banner.
* the clumsy part I need help with: configuration of the delay and
   count for the retry loop above. For some reason, my build refused to
   process the p0f_miss_retry_count and p0f_miss_retry_delay variables
   in the config file :( Possibly a late-night silly typo somewhere?

Thanks,
//Jim Klimov

Attachments

Move to quarantaine

This moves the raw source file on disk only. The archive index is not changed automatically, so you still need to run a manual refresh afterward.