Subject: Re: Passive OS fingerprint xtables match.

From: Patrick McHardy <[email-masked]>
Date: Mon, 08 Jun 2009 17:06:08 +0200

Evgeniy Polyakov wrote:
> Passive OS fingerprinting netfilter module allows to passively detect
> remote OS and perform various netfilter actions based on that knowledge.
> This module compares some data (WS, MSS, options and it's order, ttl, df
> and others) from packets with SYN bit set with dynamically loaded OS
> fingerprints.

Applied, thanks. I've made one minor change:

--- a/include/linux/netfilter/Kbuild
+++ b/include/linux/netfilter/Kbuild
@@ -33,6 +33,7 @@ header-y += xt_limit.h
  header-y += xt_mac.h
  header-y += xt_mark.h
  header-y += xt_multiport.h
+header-y += xt_osf.h
  header-y += xt_owner.h
  header-y += xt_pkttype.h
  header-y += xt_quota.h