3 ms·

Any reason to do this instead of using iptables (which is what people usually use in the linux space for this for over a decade). Example: https://www.digitalo

by dijit 4y ago

Any reason to do this instead of using iptables (which is what people usually use in the linux space for this for over a decade). Example: https://www.digitalocean.com/community/tutorials/how-to-configure-port-knocking-using-only-iptables-on-an-ubuntu-vps https://www.digitalocean.com/community/tutorials/how-to-conf...

Simsor 4y ago
Correct me if I'm wrong, but I don't think iptables allows you to authenticate the knocks? Also, anyone listening to your network would be able to replay the sequence and open the port. This project reminds me a bit of moxie's knockknock[1], where the idea of port knocking is kept intact, but with some added security. Plus, it seems really easy to setup, compared to writing dozens of iptables rules. [1]: https://github.com/moxie0/knockknock https://github.com/moxie0/knockknock
- devnull-- 4y ago
  I confirm, totally
mongrelion 4y ago
Apart from what others have mentioned already,the whole point of BPF is to replace iptables.