3 ms·

I use firehol (firehol.sf.net) along with knockd. Combined, it seems to be a rock-solid defense. The firewall will simply drop packets until someone enters the

by rufugee 16y ago

I use firehol (firehol.sf.net) along with knockd. Combined, it seems to be a rock-solid defense. The firewall will simply drop packets until someone enters the proper knock.

lancer 16y ago
FireHOL looks like a neat tool, but seeing their last (official) release was in 2008 turned me off. I'm using Shorewall now, and as a plus, it supports ipset (mentioned by rw-).