iptpkd 19
iptpkd 19
- Downloads: 349
- Requirements:
- Size:
- Licence:
- Version: 1.9
- Added At: 2011-17-06
- Publisher Site:
iptpkd 19
ipt_pkd is an iptables extension implementing port knock detection. ipt_pkd provides 3 parts: the kernel module ipt_pkd, the iptables user space module libipt_pkd.so, and a user space client knock program. For the knock packet, it uses a UDP packet sent to a random port that contains a SHA-256 of a timestamp, small header, random bytes, and a shared key. ipt_pkd checks the time window of the packet and does the SHA-256 to verify the packet. The shared key is never sent.Some examples:Protecting ssh (port 22).iptables -A INPUT -p udp -m pkd --key test -m recent --set --name PKDiptables -A INPUT -p tcp --dport 22 -m state --state NEW -m recent --rcheck --name PKD --seconds 60 --hitcount 1 -j ACCEPTiptables -A INPUT -p tcp --dport 22 -m state --state NEW -j DROPThese rules will drop any new ssh connection attempts unless a valid knock packet wa
Soft85 only provide legal software, please help us keeping pur site legal, if you think this page is violating copyrights please let us know by clicking here Here