Re: FP on p0f

> -----Original Message-----
> From: amavis-user-bounceslists.sourceforge.net 
> [mailto:amavis-user-bounceslists.sourceforge.net] On
Behalf 
> Of Mark Martinec
> Sent: Thursday, December 07, 2006 8:45 AM
> To: amavis-userlists.sourceforge.net
> Subject: Re: [AMaViS-user] FP on p0f
> 
> >     p0f OS guess    ham :   spam
> >     -----------------------------
> >     Windows-XP    0.7 % : 99.3 %
> >     Windows-2000  5.8 % : 94.2 %
> >     UNKNOWN      16.5 % : 83.5 %
> >     Linux        58.8 % : 41.2 %
> >     Unix         80.3 % : 19.7 %
> >     (Unix+Linux  66.5 % : 33.5 %)
> 
> This should do:
> 
> header L_P0F_WXP  X-Amavis-OS-Fingerprint =~ /^Windows

> XP(?![^(]*b2000 SP)/

Thanks, how about another one?

header L_P0F_W     X-Amavis-OS-Fingerprint =~ /^Windows(?!
XP)/
score  L_P0F_W     1.4


 L_P0F_W=1.4,

X-Amavis-OS-Fingerprint: Windows 2000 SP4, XP SP1+,
(distance 16, link:
	ethernet/modem), [162.130.1.198]


------------------------------------------------------------
----- 
This email has been scanned and certified safe by
SpammerTrap(tm) 
For Information please see http://www.spammertrap.com
 
------------------------------------------------------------
----- 


------------------------------------------------------------
-------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the
chance to share your
opinions on IT & business topics through brief surveys -
and earn cash
http://www.techsay.com/default.
php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/