Source OS - Android

Gil · Jan 15, 2020, 10:12 PM

Is it possible to Filter for an Android device using the "Source OS" in the
Advanced Options of a Firewall rule?

jimp · Jan 16, 2020, 8:26 PM

If it's not in the list already, then no. The fingerprint database comes from FreeBSD: https://github.com/pfsense/FreeBSD-src/blob/189c0a627f96bee933ebb1b814aa1bd5da34a513/sbin/pfctl/pf.os

It's quite old, and it's unclear if/when it would be updated upstream.

Gil · Jan 17, 2020, 12:31 AM

Thanks jimp. was just looking for additional firewall protection for a legacy bespoke FTP device.
I'll see what I can do with Suricata rules.