Hacker GitHub

← All repos

mrash/fwknop

View on GitHub ↗ ★ 1,480 Perl

Single Packet Authorization > Port Knocking

13 mentions on Hacker News by 12 people: 1 story, 12 comments · first 2017-09-20 · latest 2026-10-28

Mentions per year 13 mentions · busiest year 2020 (3)
20082026
AllStoriesComments NewestTopOldest
  1. …the password to the daemon. I've never seen it used in the wild but apparently, it exists: https://github.com/mrash/fwknop
    comment by dns_snek · 2026-10-28 · in Tailscale SSH: Investigation and remediation update
  2. …to run as root, so there's that. Support for separation of privileges is still pending since 2013 ( https://github.com/mrash/fwknop/issues/32 )
    comment by akshayrajeshwar · 2026-08-15 · in I close SSH port 22 (and what I use instead)
  3. Port knocking is so 2014. Single Packet auth for publicly exposed hidden services is great: https://github.com/mrash/fwknop
    comment by doorsopen · 2025-01-18 · in Thoughts on having SSH allow password authentication from the Internet
  4. How does this distinguish itself from fwknop? https://github.com/mrash/fwknop And what have you got to protest against DoS attacks on your packet inspection mechanism?
    comment by electric_mayhem · 2024-08-23 · in Show HN: Ruroco – like port knocking, but better
  5. I've not used it, but this ssh wrapper was mentioned here a few days ago: https://github.com/mrash/fwknop
    comment by rwmj · 2024-08-14 · in Some thoughts on OpenSSH 9.8's PerSourcePenalties feature
  6. SSH and other services can be further protected by Single Packet Authentication (SPA), https://github.com/mrash/fwknop > SPA requires only a single packet which is encrypted, non-replayable, and authenticated via an HMAC in order to…
    comment by transpute · 2024-08-11 · in Black Hat 2024: Secure Shells in Shambles [pdf]
  7. …in order to achieve a form of zero trust access. [1] - https://github.com/greenstatic/openspa [2] - https://github.com/mrash/fwknop I am currently re-writting the OpenSPA protocol (version 2) and I plan on playing around with eBPF as well,…
    comment by greenstatic · 2022-08-30 · in Show HN: Knockles – eBPF Port Knocking Tool
  8. > Anyway, interesting approach using a secret like this. Is this approach used elsewhere? yes, fwknop https://github.com/mrash/fwknop
    comment by bitbang · 2022-08-29 · in Show HN: Knockles – eBPF Port Knocking Tool
  9. …port, and saw about a 100x reduction in connection attempts, which is good enough for me. 1. https://github.com/mrash/fwknop
    comment by shaicoleman · 2021-11-17 · in Show HN: No PortScan
  10. eavesdropping, maybe. There are tools like https://github.com/mrash/fwknop that are not vulnerable to that or brute-forcing. But brute forcing in general? not a chance. There are 18446744073709551616 4 port sequences.
    comment by justinsaccount · 2020-09-11 · in Security by obscurity is underrated
  11. Personally I avoid knockd and instead use something like fwknop https://github.com/mrash/fwknop . You get the advantage of port kocking while protecting yourself from re-play attacks. The main dis-advantage is it is a more complicated…
    comment by dugite-code · 2020-05-15 · in Port knocking
  12. ▲ 5
    fwknop: Single Packet Authorization Port Knocking
    story by pmoriarty · 2020-04-09 · 0 comments
  13. Fwknop is a much better solution than whack-a-mole blacklisting or even Fail2Ban. https://github.com/mrash/fwknop
    comment by bitbang · 2017-09-20 · in Learn from your attackers – SSH HoneyPot