I'm pretty sure nmap has OS fingerprint code in it - if not Nessus sure does. -----Original Message----- From: netfilter-admin@xxxxxxxxxxxxxxxxxxx [mailto:netfilter-admin@xxxxxxxxxxxxxxxxxxx] On Behalf Of Jan Wilson Sent: Thursday, May 29, 2003 10:17 AM To: NetFilter Users List I have some users who dual-boot, Linux and Windows (a variety of versions). Rather than keep up with ALL the Windows security holes, I would like to be able to block access to computers on the LAN if the OS is Windows (or, not Linux). Obviously, I can't do it by MAC address, since the cards are the same. I could set them up with a different manual IP block, but they could change their IP numbers. Is there a fairly simple way to detect a Windows client? It doesn't have to be 100% sure. Any hints or pointers to docs would be appeciated. Thanks. -- Jan Wilson, SysAdmin _/*]; corocom@xxxxxxx Corozal Junior College | |:' corozal.com corozal.bz Corozal Town, Belize | /' chetumal.com & linux.bz Reg. Linux user #151611 |_/ Network, PHP, Perl, HTML
