RE: botnets: web servers, end-systems and Vint Cerf

[Daniel J McDonald <dan.mcdonald () austinenergy com>]

On Fri, 2007-02-16 at 16:27 +0000, michael.dillon () bt com wrote:
>

> Has anyone implemented a tool that ISPs could use to detect whether or
> not a NAT/firewall device is present? Perhaps based on OS
> fingerprinting?

Yes, p0f detects when hosts are behind a nat gateway.

-- 
Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX
Austin Energy
http://www.austinenergy.com