diff options
| author |   frantzen <frantzen@openbsd.org> | 2003-08-21 19:12:07 +0000 |
|---|---|---|
| committer | frantzen <frantzen@openbsd.org> | 2003-08-21 19:12:07 +0000 |
| commit | 64b4b6161979d95e5fda849ba7c2c8dab0f5e768 (patch) | |
| tree | 44182bfbe9491043ff5b8e77d49b714d3b5b1ff2 /share/man/man5/pf.os.5 | |
| parent | Add derivative of Michal Zalewski's p0f v2 passive OS fingerprint database (diff) | |
| download | wireguard-openbsd-64b4b6161979d95e5fda849ba7c2c8dab0f5e768.tar.xz wireguard-openbsd-64b4b6161979d95e5fda849ba7c2c8dab0f5e768.zip | |
Add Michal Zalewski's p0f v2 style passive OS fingerprinting to PF.
Exposes the source IP's operating system to the filter language.
Interesting policy decisions are now enforceable:
. block proto tcp from any os SCO
. block proto tcp from any os Windows to any port smtp
. rdr ... from any os "Windows 98" to port WWW -> 127.0.0.1 port 8001
Diffstat (limited to 'share/man/man5/pf.os.5')
0 files changed, 0 insertions, 0 deletions