wok annotate knock/description.txt @ rev 25503
f3: include extra programs
| author | Hans-G?nter Theisgen |
|---|---|
| date | Fri Jan 27 10:37:43 2023 +0100 (16 months ago) |
| parents | |
| children |
| rev | line source |
|---|---|
| Hans-G?nter@24702 | 1 Knockd is a port-knock server. |
| Hans-G?nter@24702 | 2 It listens to all traffic on an ethernet (or PPP) interface, looking |
| Hans-G?nter@24702 | 3 for special "knock" sequences of port-hits. |
| Hans-G?nter@24702 | 4 A client makes these port-hits by sending a TCP (or UDP) packet to a |
| Hans-G?nter@24702 | 5 port on the server. This port need not be open -- since knockd listens |
| Hans-G?nter@24702 | 6 at the link-layer level, it sees all traffic even if it's destined for |
| Hans-G?nter@24702 | 7 a closed port. |
| Hans-G?nter@24702 | 8 When the server detects a specific sequence of port-hits, it runs a |
| Hans-G?nter@24702 | 9 command defined in its configuration file. This can be used to open up |
| Hans-G?nter@24702 | 10 holes in a firewall for quick access. |