SYSTEM WARNING: 'date_default_timezone_get(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected the timezone 'UTC' for now, but please set date.timezone to select your timezone.' in '/usr/share/mantis/www/core.php' line 264
| Anonymous | Login | 2021-01-19 14:30 UTC |  |
| Main | My View | View Issues | Change Log | Roadmap |
| View Issue Details [ Jump to Notes ] | [ Issue History ] [ Print ] | ||||||||||
| ID | Project | Category | View Status | Date Submitted | Last Update | ||||||
| 0000542 | Endian Firewall | Security | public | 2008-02-03 09:34 | 2008-04-11 12:41 | ||||||
| Reporter | josh123 | ||||||||||
| Assigned To | |||||||||||
| Priority | normal | Severity | feature | Reproducibility | N/A | ||||||
| Status | new | Resolution | open | ||||||||
| Platform | OS | OS Version | |||||||||
| Product Version | |||||||||||
| Target Version | Fixed in Version | ||||||||||
| Summary | 0000542: Any chance of port knocking? | ||||||||||
| Description | Endian is awesome, although the beta is a bit rocky... Any chance of including port knocking like doorman, knock, or fwknop? http://www.cipherdyne.org/fwknop/ [^] http://osx.freshmeat.net/projects/doorman/ [^] http://www.zeroflux.org/cgi-bin/cvstrac.cgi/knock/wiki [^] THANKS! | ||||||||||
| Tags | No tags attached. | ||||||||||
| Attached Files |  knock-0.5-0endian0.i586.rpm [^] (6,993 bytes) 2008-04-11 07:37 knock-extras-0.5-0endian0.i586.rpm [^] (16,379 bytes) 2008-04-11 07:37 knock-server-0.5-0endian0.i586.rpm [^] (18,774 bytes) 2008-04-11 07:37 | ||||||||||
 Relationships |
|
 Relationships |
|
Notes |
|
|
(0000983) jaebird (reporter) 2008-04-11 02:12 |
I second this request, port knocking is the "new" state-of-art for obscuring internal services. |
|
(0000984) ra-endian (administrator) 2008-04-11 07:35 |
you can restrict access to services by IP. security through obscurity is a controversial principle in security engineering... i have created a rpm(knockd) for you and attached to this message. For configuring the demaen you should read the documentation and edit /etc/knockd.conf |
|
(0000985) jaebird (reporter) 2008-04-11 12:41 |
cool, thanks. I'll try it out. As far as "controversy", I use a combination lock on my locker at the gym, but I don't keep anything valuable in it. I think of port knocking as the mote around my castle...just one more layer. |
|
Notes |
|
Issue History |
|||
| Date Modified | Username | Field | Change |
| 2008-02-03 09:34 | josh123 | New Issue | |
| 2008-04-11 02:12 | jaebird | Note Added: 0000983 | |
| 2008-04-11 07:35 | ra-endian | Note Added: 0000984 | |
| 2008-04-11 07:37 | ra-endian | File Added: knock-0.5-0endian0.i586.rpm | |
| 2008-04-11 07:37 | ra-endian | File Added: knock-extras-0.5-0endian0.i586.rpm | |
| 2008-04-11 07:37 | ra-endian | File Added: knock-server-0.5-0endian0.i586.rpm | |
| 2008-04-11 12:41 | jaebird | Note Added: 0000985 | |
|
Issue History |
| Copyright © 2000 - 2012 MantisBT Group |
 |