mrash/fwknop
View on GitHub ↗ ★ 1,480 Perl
Single Packet Authorization > Port Knocking
13 mentions on Hacker News by 12 people: 1 story, 12 comments · first 2017-09-20 · latest 2026-10-28
20082026
-
…the password to the daemon. I've never seen it used in the wild but apparently, it exists: https://github.com/mrash/fwknop
comment by dns_snek · 2026-10-28 · in Tailscale SSH: Investigation and remediation update -
…to run as root, so there's that. Support for separation of privileges is still pending since 2013 ( https://github.com/mrash/fwknop/issues/32 )
comment by akshayrajeshwar · 2026-08-15 · in I close SSH port 22 (and what I use instead) -
Port knocking is so 2014. Single Packet auth for publicly exposed hidden services is great: https://github.com/mrash/fwknop
comment by doorsopen · 2025-01-18 · in Thoughts on having SSH allow password authentication from the Internet -
How does this distinguish itself from fwknop? https://github.com/mrash/fwknop And what have you got to protest against DoS attacks on your packet inspection mechanism?
comment by electric_mayhem · 2024-08-23 · in Show HN: Ruroco – like port knocking, but better -
I've not used it, but this ssh wrapper was mentioned here a few days ago: https://github.com/mrash/fwknop
comment by rwmj · 2024-08-14 · in Some thoughts on OpenSSH 9.8's PerSourcePenalties feature -
SSH and other services can be further protected by Single Packet Authentication (SPA), https://github.com/mrash/fwknop > SPA requires only a single packet which is encrypted, non-replayable, and authenticated via an HMAC in order to…
comment by transpute · 2024-08-11 · in Black Hat 2024: Secure Shells in Shambles [pdf] -
…in order to achieve a form of zero trust access. [1] - https://github.com/greenstatic/openspa [2] - https://github.com/mrash/fwknop I am currently re-writting the OpenSPA protocol (version 2) and I plan on playing around with eBPF as well,…
comment by greenstatic · 2022-08-30 · in Show HN: Knockles – eBPF Port Knocking Tool -
> Anyway, interesting approach using a secret like this. Is this approach used elsewhere? yes, fwknop https://github.com/mrash/fwknop
comment by bitbang · 2022-08-29 · in Show HN: Knockles – eBPF Port Knocking Tool -
…port, and saw about a 100x reduction in connection attempts, which is good enough for me. 1. https://github.com/mrash/fwknop
comment by shaicoleman · 2021-11-17 · in Show HN: No PortScan -
eavesdropping, maybe. There are tools like https://github.com/mrash/fwknop that are not vulnerable to that or brute-forcing. But brute forcing in general? not a chance. There are 18446744073709551616 4 port sequences.
comment by justinsaccount · 2020-09-11 · in Security by obscurity is underrated -
Personally I avoid knockd and instead use something like fwknop https://github.com/mrash/fwknop . You get the advantage of port kocking while protecting yourself from re-play attacks. The main dis-advantage is it is a more complicated…
comment by dugite-code · 2020-05-15 · in Port knocking -
Fwknop is a much better solution than whack-a-mole blacklisting or even Fail2Ban. https://github.com/mrash/fwknop
comment by bitbang · 2017-09-20 · in Learn from your attackers – SSH HoneyPot