Simple way to set up port knocking on Linux?

Posted by Ace Paus on Super User See other posts from Super User or by Ace Paus
Published on 2012-04-12T01:58:03Z Indexed on 2012/04/13 23:33 UTC
Read the original article Hit count: 278

Filed under:
|
|
|

There are well known benefits of Port Knocking utilities when utilized in combination with firewall IP table modification. Port Knocking is best used to provide an additional layer of security over other tools such as the OpenSSH server. I would like some help setting it up on a ubuntu server.

I looked at some port knocking implementations here:
PORTKNOCKING - A system for stealthy authentication across closed ports. IMPLEMENTATIONS
http://www.portknocking.org/view/implementations

fwknop looked good. I found an Android client here. And fwknop (both client and server) is in the ubuntu repos.

Unfortunately, setting it up (on the server) looks difficult. I do not have iptables set up. My proficiency with iptables is limited (but I understand the basics). I'm looking for a series of simple steps to set it up. I only want to open the SSH port in response to a valid knock.

Alternatively, I would consider other port knocking implementations, if they are much simpler to set up and the desired Linux and Android clients are available.

© Super User or respective owner

Related posts about ssh

Related posts about security