sf

fwknop implements an authorisation scheme known every bit Single Packet Authorization (SPA) for strong service concealment. SPA requires only a unmarried bundle which is encrypted, non-replayable, as well as authenticated via an HMAC inwards gild to communicate desired access to a service that is hidden behind a firewall inwards a default-drop filtering stance. The principal application of SPA is to utilisation a firewall to drib all attempts to connect to services such every bit SSH inwards gild to brand the exploitation of vulnerabilities (both 0-day as well as unpatched code) to a greater extent than difficult. Because at that topographic point are no opened upwards ports, whatever service that is concealed past times SPA naturally cannot endure scanned for amongst Nmap. The fwknop projection supports 4 unlike firewalls: iptables, firewalld, PF, as well as ipfw across Linux, OpenBSD, FreeBSD, as well as Mac OS X. There is every bit good back upwards for custom scripts so that f...