fwknop-2.6.5-alt1_2.x86_64.rpm


Advertisement

Description

fwknop - A Single Packet Authorization (SPA) implementation

Property Value
Distribution ALT Linux Sisyphus
Repository Autoimports x86_64
Package filename fwknop-2.6.5-alt1_2.x86_64.rpm
Package name fwknop
Package version 2.6.5
Package release alt1_2
Package architecture x86_64
Package type rpm
Category System/Servers
Homepage -
License -
Maintainer -
Download size 411.55 KB
Installed size 411.55 KB
fwknop implements an authorization scheme known as Single Packet
Authorization (SPA) that requires only a single encrypted packet to
communicate various pieces of information including desired access through an
iptables policy and/or specific commands to execute on the target system.
The main application of this program is to protect services such as SSH with
an additional layer of security in order to make the exploitation of
vulnerabilities (both 0-day and unpatched code) much more difficult.  The
authorization server passively monitors authorization packets via libpcap and
hence there is no "server" to which to connect in the traditional sense.  Any
service protected by fwknop is inaccessible (by using iptables to
intercept packets within the kernel) before authenticating; anyone scanning for
the service will not be able to detect that it is even listening.  This
authorization scheme offers many advantages over port knocking, include being
non-replayable, much more data can be communicated, and the scheme cannot be
broken by simply connecting to extraneous ports on the server in an effort to
break knock sequences.  The authorization packets can easily be spoofed as
well, and this makes it possible to make it appear as though, say,
www.yahoo.com is trying to authenticate to a target system but in reality the
actual connection will come from a seemingly unrelated IP. Although the
default data collection method is to use libpcap to sniff packets off the
wire, fwknop can also read packets out of a file that is written by the
iptables ulogd pcap writer or by a separate sniffer process.

Alternatives

Package Version Architecture Repository
fwknop-2.6.5-alt1_2.i586.rpm 2.6.5 i586 Autoimports
fwknop - - -

Requires

Name Value
/lib64/ld-linux-x86-64.so.2 -
/usr/sbin/post_service -
/usr/sbin/preun_service -
libc.so.6()(64bit) -
libc.so.6(GLIBC_2.11)(64bit) -
libc.so.6(GLIBC_2.14)(64bit) -
libc.so.6(GLIBC_2.15)(64bit) -
libc.so.6(GLIBC_2.2.5)(64bit) -
libc.so.6(GLIBC_2.3)(64bit) -
libc.so.6(GLIBC_2.3.4)(64bit) -
libc.so.6(GLIBC_2.4)(64bit) -
libc.so.6(GLIBC_2.7)(64bit) -
libgpgme.so.11()(64bit) -
libgpgme.so.11(GPGME_1.0)(64bit) -
libgpgme.so.11(GPGME_1.1)(64bit) -
libgpgme.so.11(GPGME_1.2)(64bit) -
libpcap.so.0.8()(64bit) -
logrotate -
rpmlib(PayloadIsLzma) -
rpmlib(SetVersions) -
rtld(GNU_HASH) -
systemd -

Provides

Name Value
fwknop = 2.6.5-alt1_2
libfko.so.2()(64bit) -

Download

Type URL
Mirror ftp.altlinux.org
Binary Package fwknop-2.6.5-alt1_2.x86_64.rpm
Source Package fwknop-2.6.5-alt1_2.src.rpm

Install Howto

  1. Add the following line to /etc/apt/sources.list:
    
    rpm [Sisyphus] http://ftp.altlinux.org/pub/distributions/ALTLinux/autoimports/Sisyphus x86_64 autoimports
    rpm [Sisyphus] http://ftp.altlinux.org/pub/distributions/ALTLinux/autoimports/Sisyphus noarch autoimports
    
  2. Update the package index:
    # sudo apt-get update
  3. Install fwknop rpm package:
    # sudo apt-get install fwknop

Files

Path
/etc/fwknop/access.conf
/etc/fwknop/fwknopd.conf
/lib/systemd/system/fwknopd.service
/usr/bin/fwknop
/usr/lib64/libfko.so.2
/usr/lib64/libfko.so.2.0.3
/usr/sbin/fwknopd
/usr/share/doc/fwknop-2.6.5/COPYING
/usr/share/doc/fwknop-2.6.5/CREDITS
/usr/share/doc/fwknop-2.6.5/ChangeLog
/usr/share/doc/fwknop-2.6.5/README
/usr/share/man/man8/fwknop.8.bz2
/usr/share/man/man8/fwknopd.8.bz2

See Also

Package Description
g2clib-devel-1.6.0-alt1_7.x86_64.rpm Development files for g2clib
galois-0.6-alt1_1.x86_64.rpm Extended falling blocks game with many different geometries
gappa-0.16.6-alt2_1.x86_64.rpm Prove programs with floating-point or fixed-point arithmetic
garmindev-0.3.4-alt1_18.x86_64.rpm Drivers for communication with Garmin GPS devices
gauche-0.9.5-alt1_6.x86_64.rpm Scheme script interpreter with multibyte character handling
gauche-devel-0.9.5-alt1_6.x86_64.rpm Development files for Gauche
gauche-gl-0.6-alt2_13.x86_64.rpm OpenGL binding for Gauche
gauche-gl-devel-0.6-alt2_13.x86_64.rpm Development files for gauche-gl
gauche-gtk-0.6-alt2_0.24.20181110git0220722.x86_64.rpm Gauche extension module to use GTK
gauche-gtk-devel-0.6-alt2_0.24.20181110git0220722.x86_64.rpm Development files for gauche-gtk
gcolor2-0.4-alt1_18.x86_64.rpm A simple color selector for GTK+2
gcolor3-2.3.1-alt1_5.x86_64.rpm A simple color chooser written in GTK3 (like gcolor2)
gdigi-0.4.0-alt1_20140216gitcada964d.x86_64.rpm Utility to control DigiTech effect pedals
gdmap-0.8.1-alt1_16.x86_64.rpm A tool which allows to visualize disk space
gdome2-0.8.1-alt1_11.x86_64.rpm DOM level 2 library for accessing XML files
Advertisement
Advertisement