|Main Archive Page > Month Archives > clamav-users archives|
Dennis Peterson wrote:
> How are able to determine that? There's nothing in the connection
> information or in the message that identifies the source OS, hardware,
> or MTA. Everything in a message can be spoofed as can the sending
> system. The only thing you can be sure of is the IP you log during the
> connection. Nothing else can be considered real.
P0f maybe? Although with my experience it has never been that accurate and is easy to fool if one so desires.