4 ms·
> The thing about port knocking is that if you're on a host where you don't have the ability to port-knock, then you're not able to connect. You can type http:
by mlyle 3y ago
> The thing about port knocking is that if you're on a host where you don't have the ability to port-knock, then you're not able to connect.
You can type http://hostname:porttoknock http://hostname:porttoknock in a browser.
As long as you're not behind a super restrictive gateway that doesn't let you connect to arbitrary ports, you're golden.
- webmaven 3y agoTIL another interesting browser feature. Thank you.
- bee_rider 3y agoIt seems like there’d be a pretty big overlap between those kinds of hosts.
- noman-land 3y agoI'm a bit of a noob about this. Can you explain what this means?
- shanemhansen 3y agoPort knocking involves sending a packet to certain ports on a host. It's overkill but typing http://host:port/ http://host:port/ in your browser will, as part of trying to make a TCP connection, send a packet to that port.
- noman-land 3y agoThanks, I didn't realize port knocking could be done manually like this as a way to "unlock" an eventual regular ssh attempt outside the browser. This makes sense now and is super clever!
- Dwedit 3y agoI've actually been behind a firewall that blocked outgoing connections except on several well-known ports. Had to run my SSH server over the port usually used for HTTPS just to get it unblocked.
- AlexCoventry 3y agoSome versions of port knocking require a specific type of packet. https://github.com/moxie0/knockknock https://github.com/moxie0/knockknock
- toast0 3y agoLikely won't be enough if you're behind CGNAT and you get a different public IP on different connections.
- mlyle 3y agoMost decent CGNAT will give you the same source IP when you connect to the same dest IP repeatedly.