Fwknop

[edit]

• Overview
• Details
• About this entry

fwknop

http://www.cipherdyne.org/fwknop/
Adds an additional layer of security to services such as SSH

'fwknop' implements an authorization scheme that requires only a single encrypted packet to communicate various pieces of information, including desired access through a Netfilter policy and/or specific commands to execute on the target system. Its main use is to protect services such as SSH with an additional layer of security, which makies exploitation of vulnerabilities much more difficult. The authorization server works by passively monitoring authorization packets via libpcap.

Documentation

User manpage available in HTML format from http://www.cipherdyne.org/projects/fwknop/docs.html

Download

http://www.cipherdyne.org/fwknop/download/fwknop-2.6.9.tar.bz2

version 2.6.9 (stable)
released on 8 June 2016

Categories

• Interface:command-line
• Runs-on:GNU/Linux
• Security:firewall
• Use:security

Related Projects

• Port Scan Attack Detector
• Doorman

Licensing

License

Verified by

Verified on

Notes

License

GPLv2

Verified by

Janet Casey

Verified on

29 July 2005

Leaders and contributors

Contact(s)	Role
Michael Rash	Maintainer
See the CREDITS file in the distribution for a complete list	Contributor

Resources and communication

Audience	Resource type	URI
Developer	VCS Repository Webview	http://www.cipherdyne.org/cgi/viewcvs.cgi/fwknop/
Bug Tracking,Developer,Support	E-mail	mailto:mbr@cipherdyne.org
Debian (Ref)		https://tracker.debian.org/pkg/fwknop

Software prerequisites

This entry (in part or in whole) was last reviewed on 14 February 2018.

Entry

Property "Submitted by" (as page type) with input value "{{{Submitted by}}}" contains invalid characters or is incomplete and therefore can cause unexpected results during a query or annotation process.

"Debian (Ref)" is not in the list (General, Help, Bug Tracking, Support, Developer) of allowed values for the "Resource audience" property.