Slashdot Mirror
"Port Knocking" For Added Security
Jeff writes "The process of Port Knocking is a way to allow only people who know the "secret knock" access to a certain port on a system. For example, if I wanted to connect via SSH to a server, I could build a backdoor on the server that does not directly listen on port 22 (or any port for that matter) until it detects connection attempts to closed ports 1026,1027,1029,1034,1026,1044 and 1035 in that sequence within 5 seconds, then listens on port 22 for a connection within 10 seconds.
The web site explains it in some detail, and there is even an experimental perl implementation of it that is available for download. I can't think of any easy ways you could get around a system using this security method - let alone even know that a system is implementing it.
Another article on port knocking is here."
little pig little pig...
let me in
Am I the only one who heard Beavis say "Port Knocker!"?
Probably...
---- It puts the lotion on its skin or else it gets the hose again. It does this whenever it's told.
Knock knock...
;)
Who's there?
Usher.
Usher who?
Usher wish I could SSH to your server!
Sorry...
libertarianswag.com
That is a very old method i developed with my friends. We would only open the door after a "secret" knock sequence. We had seen this on TV and thought this would be cool. We jeopardized the security regularly when we said "wrong knock" after someone else knocked. Usually parents. Then they would say "open up". And we had to comply.
Is the site slashdotted...
...or do I have to knock my way in?
I demand the Cone of Silence!
That was, quite possibly, the greatest analogy in the history of /.
Before you Slashdot about "port knocking", please
send your text through a spellchecker.
"implimenting" should read "implementing".
Remember, the "President"
was AWOL
Regards,
Kilgore
It sounds like a euphemism for something obscene. I bet it's illegal in Texas.
-Carolyn
Like Daddy always said: if you can't dazzle 'em with brilliance, baffle 'em with bullshit.
It's called a secret knock and that's the best analogy you could come up with? Perhaps it's more like a ten-foot-thick steel blast door, but you can't even see the keyhole unless you knock on it just the right way?
Does anyone know the secret knock for www.portknocking.org:80 ?
Thanks.
SPAM
Rather than sniffing her network and replaying sequences, why not just buy her dinner to gain access to her "hidden port"?
---- It puts the lotion on its skin or else it gets the hose again. It does this whenever it's told.
site up
knock 80
knock 80
knock 80
site down
Great. Just what you want to do is hard-code a quicker way to DoS you system.
TERRIFIC.
This will be used only on systems storing highly sensitive Star Trek Fan-fiction.
This reminds me of a cgi driven website I visited a loooong time ago (1996?)
I was creating a user account, and was using the password "beelzebub". However, the system refused to let me create the account. It displayed a page which stated "That password is invalid: It is being used by another user. Please select a unique password."
Apparently, some genius thought it was good security to ensure that no two users had the same password. I hope you can see the intrinsic flaw in this :-)
Butthead: "Uhhhha, I am gonna emale you....in the butt.
Beavis: "Shutup! Port-knocker!
"Yeah, NAT breaks stuff, get used to it."
/Beavis Voice
Shat up, port knocker.
"Derp de derp."
Fine Idea! ... now someone just needs to develop a way to leave a "virtual bag of flaming poo" at one of your ports.
YOUR FACE