Filter iPhones by source OS?

ttblum

Hello,

Is it possible to filter/limit iPhones with firewall rules using the Source OS feature? Would I specificy MacOS for this?

jimp

IIRC we use a database from p0f to check that, so if they can detect it separately, it should work in theory. We may need to update our signatures from them though.

See #4 here: http://lcamtuf.coredump.cx/p0f3/
Go there in an iOS browser, see what it shows.

jimp

I updated our DB but it doesn't appear to have any sigs that would match iOS.

https://github.com/pfsense/pfsense/blob/master/etc/pf.os

We pull that from FreeBSD, which in turn pulls that from OpenBSD, which gets their data from the p0f project (but not quite in the same format, iirc)