PF, The OpenBSD Packet Filter: Building The Network You Need: BSDCan, Ottawa, June 10th 2015 | ||
---|---|---|
Prev | Next |
PF has a fairly reliable operating system detection built in:
pass quick proto tcp from any os "Windows" to $ext_if \ port smtp set queue smallpipe
A similar trick helped someone with a Microsoft-borne worm problem some years back (see ALTQ - Handling Unwanted Traffic and http://use.perl.org/~merlyn/journal/17094).