3 ms·
"One thing to consider though is becoming a dns resolver for any random thing on the net. What I did for this was create a bash script that adds the visiting ip
by rsync 7y ago
"One thing to consider though is becoming a dns resolver for any random thing on the net. What I did for this was create a bash script that adds the visiting ip to iptables whitelist. Created an impossible-to-guess php page (pi admin uses php so it’s already installed and ready to go) which takes the REMOTE_ADDR and passes it to the bash script to add to iptables."
I hesitate to mention this, as it causes heads to explode, but the problem you're describing is nicely solved with port-knocking. Might be easier than setting up the php page, etc. ...
- pdimitar 7y agoPardon my ignorance: can you recommend a good learning material on port knocking?
- obituary_latte 7y agoHere’s an example: https://www.inmotionhosting.com/support/website/ssh/how-to-use-port-knocking https://www.inmotionhosting.com/support/website/ssh/how-to-u... But just search googs for “port knocking” and you’ll find a ton of info.
- obituary_latte 7y agoHow would that work? How could I set up, for instance, my iPhone to port knock to allow port 53 access to the server from an unknown remote ip? Edit: found this guide https://www.inmotionhosting.com/support/website/ssh/how-to-use-port-knocking https://www.inmotionhosting.com/support/website/ssh/how-to-u... Looks like I could just create some bookmarks for the ports and open them sequentially. I think overall this is a much better solution than messing with php/bash - good idea and thanks!