3 ms·
A port knock is just a clear password :/ I much prefer restricting port 22 to a few ip and disable passwords
by s3m4j 8y ago
A port knock is just a clear password :/
I much prefer restricting port 22 to a few ip and disable passwords
- lakechfoma 8y agoNot with single packet authentication from fwknop http://www.cipherdyne.org/fwknop/docs/fwknop-tutorial.html#what-is-SPA http://www.cipherdyne.org/fwknop/docs/fwknop-tutorial.html#w...
- Operyl 8y agofwknop has a cache to prevent replay attacks, that plus the fact the packets are only valid for a certain length of time pretty much thwarts this. Remember, fwknop is _in addition_ to your existing security practices, it is not the only "password."
- rsync 8y ago"A port knock is just a clear password" It is only clear to the routers in your traceroute ... third party attackers cannot snoop on this traffic.
- sliken 8y agoRight, exactly like a clear text password.