Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #196787

Re: port knocking

From basti <basti@unix-solution.de>
Newsgroups linux.debian.user
Subject Re: port knocking
Date 2018-06-19 23:20 +0200
Message-ID <w2wcF-7j4-3@gated-at.bofh.it> (permalink)
References <w2v6V-6HM-7@gated-at.bofh.it> <w2vqi-6NL-5@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw



On 19.06.2018 22:24, john doe wrote:
> On 6/19/2018 10:04 PM, basti wrote:
>> Hello,
>> I try use use port knocking and would be happy to do this in ssh config
>> file.
>>
>> To open the port I can use ProxyCommand with an wrapper script like
>>
>> ProxyCommand bash -c 'wrapper.sh %h port1 port2 ... portX; nc %h %p'
>>
>> so far so good.
>>
>> But if I understand port knocking in the right way I must close the port
>> after disconnect?
>>
>> I havened found a way for this like post-connect in ssh config.
>>
>> Has anyone a suggestion how it can be implemented?
>>
> 
> Any reasons why you can't let your firewall handle the port nocking
> functionality?
> 

I open the port with iptables, and than? can you please explain?

Back to linux.debian.user | Previous | Next — Previous in thread | Find similar | Unroll thread


Thread

port knocking basti <mailinglist@unix-solution.de> - 2018-06-19 22:10 +0200
  Re: port knocking john doe <johndoe65534@mail.com> - 2018-06-19 22:30 +0200
    Re: port knocking basti <mailinglist@unix-solution.de> - 2018-06-19 22:40 +0200
      Re: port knocking john doe <johndoe65534@mail.com> - 2018-06-19 22:50 +0200
    Re: port knocking basti <basti@unix-solution.de> - 2018-06-19 23:20 +0200

csiph-web