| Building The Network You Need With PF, The OpenBSD Packet Filter: BSDCan 2016, Ottawa, Canada, June 8th 2016 | ||
|---|---|---|
| Prev | Next | |
PF has a fairly reliable operating system detection built in:
pass quick proto tcp from any os "Windows" to $ext_if \ port smtp set queue smallpipe
A similar trick helped someone with a Microsoft-borne worm problem some years back (see ALTQ - Handling Unwanted Traffic and http://use.perl.org/~merlyn/journal/17094).