Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

add GUI for basic port knocking #990

Closed
cyberduck opened this issue Jan 11, 2007 · 4 comments
Closed

add GUI for basic port knocking #990

cyberduck opened this issue Jan 11, 2007 · 4 comments

Comments

@cyberduck
Copy link
Collaborator

@cyberduck cyberduck commented Jan 11, 2007

4a4c622 created the issue

Please add support for basic (empty TCP/UDP packets to certain ports) port knocking, which is a simple security system often used with SSH. It should be very easy to add support.

Port knocking is good because it's easy (especially compared to keys and other VPN stuff) for users, network administrators, and software developers. Port knocking helps mitigate random dictionary attacks.

Right now our Mac OS X user has to use a script in a terminal, which is not convenient.

Some info here:
http://en.wikipedia.org/wiki/Port_knocking
http://www.zeroflux.org/cgi-bin/cvstrac.cgi/knock/wiki

@cyberduck
Copy link
Collaborator Author

@cyberduck cyberduck commented Jan 13, 2007

@dkocher commented

I don't like security through obscurity.

Loading

@cyberduck
Copy link
Collaborator Author

@cyberduck cyberduck commented Jan 15, 2007

4a4c622 commented

I don't like "security through obscurity" either, but this is different. Port knocking is very similar to passwords (which are very standard in your software already). For example, either can be defeated with a lot of patience. So if you think PK is obscurity, so are passwords. Actually, I found an article on the subject:
http://www.portknocking.org/view/about/obscurity

Actual obscurity would be simply changing the SSH daemon port number.

Please reconsider.

Loading

@cyberduck
Copy link
Collaborator Author

@cyberduck cyberduck commented Jan 15, 2007

@dkocher commented

Is there an client-side opensource implementation in C/Objective-C/Java available?

Loading

@cyberduck
Copy link
Collaborator Author

@cyberduck cyberduck commented Jan 15, 2007

4a4c622 commented

Port knocking client implementation in C under open source license:
http://www.zeroflux.org/cgi-bin/cvstrac.cgi/knock/wiki

More implementations:
http://portknocking.org/view/implementations

Loading

@cyberduck cyberduck closed this May 18, 2007
@iterate-ch iterate-ch locked as resolved and limited conversation to collaborators Nov 26, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Linked pull requests

Successfully merging a pull request may close this issue.

None yet
2 participants