wok annotate knock/description.txt @ rev 25705
fusecloop/extract_compressed_fs: can convert to v0.68 or v1.0
| author | Pascal Bellard <pascal.bellard@slitaz.org> |
|---|---|
| date | Sat Jun 22 12:48:49 2024 +0000 (4 months ago) |
| parents | |
| children |
| rev | line source |
|---|---|
| Hans-G?nter@24702 | 1 Knockd is a port-knock server. |
| Hans-G?nter@24702 | 2 It listens to all traffic on an ethernet (or PPP) interface, looking |
| Hans-G?nter@24702 | 3 for special "knock" sequences of port-hits. |
| Hans-G?nter@24702 | 4 A client makes these port-hits by sending a TCP (or UDP) packet to a |
| Hans-G?nter@24702 | 5 port on the server. This port need not be open -- since knockd listens |
| Hans-G?nter@24702 | 6 at the link-layer level, it sees all traffic even if it's destined for |
| Hans-G?nter@24702 | 7 a closed port. |
| Hans-G?nter@24702 | 8 When the server detects a specific sequence of port-hits, it runs a |
| Hans-G?nter@24702 | 9 command defined in its configuration file. This can be used to open up |
| Hans-G?nter@24702 | 10 holes in a firewall for quick access. |