Knockd - Revision history http://wiki.dd-wrt.com/wiki/index.php?title=Knockd&action=history Revision history for this page on the wiki en MediaWiki 1.10.1 Thu, 28 Mar 2024 19:54:22 GMT Glenn: catchg http://wiki.dd-wrt.com/wiki/index.php?title=Knockd&diff=31705&oldid=prev <p>catchg</p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 14:56, 30 April 2010</td> </tr> <tr><td colspan="2" align="left"><strong>Line 142:</strong></td> <td colspan="2" align="left"><strong>Line 142:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">*[http://www.portknocking.org/ PortKnocking.org]</td><td> </td><td style="background: #eee; font-size: smaller;">*[http://www.portknocking.org/ PortKnocking.org]</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">[[Category:<del style="color: red; font-weight: bold; text-decoration: none;">English documentation</del>]]</td><td>+</td><td style="background: #cfc; font-size: smaller;">[[Category:<ins style="color: red; font-weight: bold; text-decoration: none;">Applications</ins>]]</td></tr> </table> Fri, 30 Apr 2010 14:56:13 GMT Glenn http://wiki.dd-wrt.com/wiki/index.php/Talk:Knockd Mrjcleaver: /* Installation */ http://wiki.dd-wrt.com/wiki/index.php?title=Knockd&diff=19195&oldid=prev <p><span class="autocomment">Installation</span></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 00:40, 18 February 2008</td> </tr> <tr><td colspan="2" align="left"><strong>Line 19:</strong></td> <td colspan="2" align="left"><strong>Line 19:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">== Installation ==</td><td> </td><td style="background: #eee; font-size: smaller;">== Installation ==</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">NB. http://www.dd-wrt.com/phpBB2/viewtopic.php?t=5935&amp;view=previous&amp;sid=4e92151d09fa5d4a0a69f0294ce7eb32 tells of problems with these instructions, and an alternate solution.</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">===Install the libpcap package===</td><td> </td><td style="background: #eee; font-size: smaller;">===Install the libpcap package===</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">''Knockd depends on libpcap's presence. If it isn't installed, install it''</td><td> </td><td style="background: #eee; font-size: smaller;">''Knockd depends on libpcap's presence. If it isn't installed, install it''</td></tr> </table> Mon, 18 Feb 2008 00:40:44 GMT Mrjcleaver http://wiki.dd-wrt.com/wiki/index.php/Talk:Knockd Whiteboy: /* = Configure LD PATH */ http://wiki.dd-wrt.com/wiki/index.php?title=Knockd&diff=15231&oldid=prev <p><span class="autocomment">= Configure LD PATH</span></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 04:05, 14 December 2006</td> </tr> <tr><td colspan="2" align="left"><strong>Line 45:</strong></td> <td colspan="2" align="left"><strong>Line 45:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">for the &quot;open sesame&quot; rule, replace &quot;-A INPUT&quot; by &quot;-I INPUT&quot; (the last rule is a generic DROP one, and control would never reach the appended rule)</td><td> </td><td style="background: #eee; font-size: smaller;">for the &quot;open sesame&quot; rule, replace &quot;-A INPUT&quot; by &quot;-I INPUT&quot; (the last rule is a generic DROP one, and control would never reach the appended rule)</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">=== Configure LD PATH ==</td><td>+</td><td style="background: #cfc; font-size: smaller;">=== Configure LD PATH <ins style="color: red; font-weight: bold; text-decoration: none;">=</ins>==</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">at the command prompt type the following</td><td> </td><td style="background: #eee; font-size: smaller;">at the command prompt type the following</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"> $ LD_LIBRARY_PATH=/lib:/usr/lib:/jffs/lib:/jffs/usr/lib</td><td> </td><td style="background: #eee; font-size: smaller;"> $ LD_LIBRARY_PATH=/lib:/usr/lib:/jffs/lib:/jffs/usr/lib</td></tr> </table> Thu, 14 Dec 2006 04:05:19 GMT Whiteboy http://wiki.dd-wrt.com/wiki/index.php/Talk:Knockd Whiteboy at 04:05, 14 December 2006 http://wiki.dd-wrt.com/wiki/index.php?title=Knockd&diff=9239&oldid=prev <p></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 04:05, 14 December 2006</td> </tr> <tr><td colspan="2" align="left"><strong>Line 18:</strong></td> <td colspan="2" align="left"><strong>Line 18:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"> -[http://vim.org/ Vim], [http://www.gena01.com/win32pad/win32pad_1_5_7.exe Win32Pad], [http://www.crimsoneditor.com/ Crimson Editor] or [http://www.flos-freeware.ch/notepad2.html Notepad2]&lt;br&gt; (or other *nix friendly text editor. DO NOT USE NOTEPAD)</td><td> </td><td style="background: #eee; font-size: smaller;"> -[http://vim.org/ Vim], [http://www.gena01.com/win32pad/win32pad_1_5_7.exe Win32Pad], [http://www.crimsoneditor.com/ Crimson Editor] or [http://www.flos-freeware.ch/notepad2.html Notepad2]&lt;br&gt; (or other *nix friendly text editor. DO NOT USE NOTEPAD)</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">&#160;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">=</ins>= Installation <ins style="color: red; font-weight: bold; text-decoration: none;">=</ins>=</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">= Installation =</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">===Install the libpcap package===</td><td> </td><td style="background: #eee; font-size: smaller;">===Install the libpcap package===</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">''Knockd depends on libpcap's presence. If it isn't installed, install it''</td><td> </td><td style="background: #eee; font-size: smaller;">''Knockd depends on libpcap's presence. If it isn't installed, install it''</td></tr> <tr><td colspan="2" align="left"><strong>Line 46:</strong></td> <td colspan="2" align="left"><strong>Line 45:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">for the &quot;open sesame&quot; rule, replace &quot;-A INPUT&quot; by &quot;-I INPUT&quot; (the last rule is a generic DROP one, and control would never reach the appended rule)</td><td> </td><td style="background: #eee; font-size: smaller;">for the &quot;open sesame&quot; rule, replace &quot;-A INPUT&quot; by &quot;-I INPUT&quot; (the last rule is a generic DROP one, and control would never reach the appended rule)</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">==Configure LD PATH <del style="color: red; font-weight: bold; text-decoration: none;">because we can't change /etc/ld.so.conf</del>==</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">=</ins>== Configure LD PATH ==</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">at the command prompt type the following</td><td> </td><td style="background: #eee; font-size: smaller;">at the command prompt type the following</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"> $ LD_LIBRARY_PATH=/lib:/usr/lib:/jffs/lib:/jffs/usr/lib</td><td> </td><td style="background: #eee; font-size: smaller;"> $ LD_LIBRARY_PATH=/lib:/usr/lib:/jffs/lib:/jffs/usr/lib</td></tr> <tr><td colspan="2" align="left"><strong>Line 53:</strong></td> <td colspan="2" align="left"><strong>Line 52:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">You will need to set this every time the router reboots, or include it in your [[Startup Scripts]]</td><td> </td><td style="background: #eee; font-size: smaller;">You will need to set this every time the router reboots, or include it in your [[Startup Scripts]]</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">=Usage &amp; Troubleshooting=</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">=</ins>= Usage &amp; Troubleshooting <ins style="color: red; font-weight: bold; text-decoration: none;">=</ins>=</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">==General Usage==</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">=</ins>== General Usage <ins style="color: red; font-weight: bold; text-decoration: none;">=</ins>==</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">You will need to pass a different config file at startup (again because of </td><td> </td><td style="background: #eee; font-size: smaller;">You will need to pass a different config file at startup (again because of </td></tr> <tr><td colspan="2" align="left"><strong>Line 71:</strong></td> <td colspan="2" align="left"><strong>Line 70:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">See the [http://www.zeroflux.org/cgi-bin/cvstrac.cgi/knock/wiki knockd homepage]</td><td> </td><td style="background: #eee; font-size: smaller;">See the [http://www.zeroflux.org/cgi-bin/cvstrac.cgi/knock/wiki knockd homepage]</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">&#160;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">=</ins>== Troubleshooting <ins style="color: red; font-weight: bold; text-decoration: none;">=</ins>==</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">==Troubleshooting==</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">See the [http://www.zeroflux.org/cgi-bin/cvstrac.cgi/knock/wiki knockd homepage]</td><td> </td><td style="background: #eee; font-size: smaller;">See the [http://www.zeroflux.org/cgi-bin/cvstrac.cgi/knock/wiki knockd homepage]</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td colspan="2" align="left"><strong>Line 98:</strong></td> <td colspan="2" align="left"><strong>Line 96:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">=Security=</td><td>+</td><td style="background: #cfc; font-size: smaller;">= Security =</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">&#160;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">''One Persons Opinion on Security - Not shared by the respondants below''</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">''personal opinions on Security''</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">Port knocking is not a means of security and has been compromised in the past. First off, its only a means of authentication, not a means of protection. A sniffer sitting between the client and the router could easily pick up on the sequence and repeat it. Also, a few tools are out there that can be used to &quot;brute force&quot; this technique. In general, Port Knocking is not secure. A better solution is VPN tunnels, since they employ strong authentication and encryption. Furthermore, port knocking is also vulnerable to spoofing. If a hacker is able to spoof his/her IP, they could prevent a legitimat user from doing the sequence by interupting the pattern. Also mentioned was the fact that it protected the router from port scanning attacks. A better means of protection (Again VPN being ideal if the services are only meant for the outside world) is to ban the IP address attempting to port scan the router. So if the attacker where to scan TCP ports 1 2 3 4 in sequence, the router would add a iptables rule saying &quot;If &lt;IP Address&gt; attempts to connect, drop.&quot; Also, the mention of knocking ports 1-5 and running a script to disable the WAN port or shutdown the router leaves open the possibility of DOS attacks. Since port knocking keeps track of the IP address of the knocker, it is entirely possible to use multiple IP addresses to port scan the router in order to prevent any pattern of arising. Also, tools like NMAP have time delays to prevent the firewall from knowing its being portscanned. If someone where to portscan the router using 3 different IP addresses with a 2 second delay between each port and random port numbers, port knocking (as a means of protection) would not work. In general, port knocking is a big No No.. If you want real security, secure the services behind the firewall and use a VPN connection when necessary..</td><td> </td><td style="background: #eee; font-size: smaller;">Port knocking is not a means of security and has been compromised in the past. First off, its only a means of authentication, not a means of protection. A sniffer sitting between the client and the router could easily pick up on the sequence and repeat it. Also, a few tools are out there that can be used to &quot;brute force&quot; this technique. In general, Port Knocking is not secure. A better solution is VPN tunnels, since they employ strong authentication and encryption. Furthermore, port knocking is also vulnerable to spoofing. If a hacker is able to spoof his/her IP, they could prevent a legitimat user from doing the sequence by interupting the pattern. Also mentioned was the fact that it protected the router from port scanning attacks. A better means of protection (Again VPN being ideal if the services are only meant for the outside world) is to ban the IP address attempting to port scan the router. So if the attacker where to scan TCP ports 1 2 3 4 in sequence, the router would add a iptables rule saying &quot;If &lt;IP Address&gt; attempts to connect, drop.&quot; Also, the mention of knocking ports 1-5 and running a script to disable the WAN port or shutdown the router leaves open the possibility of DOS attacks. Since port knocking keeps track of the IP address of the knocker, it is entirely possible to use multiple IP addresses to port scan the router in order to prevent any pattern of arising. Also, tools like NMAP have time delays to prevent the firewall from knowing its being portscanned. If someone where to portscan the router using 3 different IP addresses with a 2 second delay between each port and random port numbers, port knocking (as a means of protection) would not work. In general, port knocking is a big No No.. If you want real security, secure the services behind the firewall and use a VPN connection when necessary..</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td colspan="2" align="left"><strong>Line 136:</strong></td> <td colspan="2" align="left"><strong>Line 133:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">revealed.</td><td> </td><td style="background: #eee; font-size: smaller;">revealed.</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">=External <del style="color: red; font-weight: bold; text-decoration: none;">Resources</del>=</td><td>+</td><td style="background: #cfc; font-size: smaller;">= External <ins style="color: red; font-weight: bold; text-decoration: none;">links </ins>=</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">*[http://www.linuxjournal.com/article/6811#N0x850ca00.0x8573d90 Linux Journal's General Discussion of Port Knocking]</td><td> </td><td style="background: #eee; font-size: smaller;">*[http://www.linuxjournal.com/article/6811#N0x850ca00.0x8573d90 Linux Journal's General Discussion of Port Knocking]</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">*[http://www.zeroflux.org/cgi-bin/cvstrac.cgi/knock/wiki knockd official wiki]</td><td> </td><td style="background: #eee; font-size: smaller;">*[http://www.zeroflux.org/cgi-bin/cvstrac.cgi/knock/wiki knockd official wiki]</td></tr> </table> Thu, 14 Dec 2006 04:05:06 GMT Whiteboy http://wiki.dd-wrt.com/wiki/index.php/Talk:Knockd Whiteboy: /* Adjust knockd.conf to DD-WRT */ http://wiki.dd-wrt.com/wiki/index.php?title=Knockd&diff=9238&oldid=prev <p><span class="autocomment">Adjust knockd.conf to DD-WRT</span></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 04:02, 14 December 2006</td> </tr> <tr><td colspan="2" align="left"><strong>Line 43:</strong></td> <td colspan="2" align="left"><strong>Line 43:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"> Ex: ''ipkg -d ram install http://openwrt.alphacore.net/knockd_0.4_mipsel.ipk''</td><td> </td><td style="background: #eee; font-size: smaller;"> Ex: ''ipkg -d ram install http://openwrt.alphacore.net/knockd_0.4_mipsel.ipk''</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">== Adjust knockd.conf to DD-WRT==</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">==</ins>== Adjust knockd.conf to DD-WRT <ins style="color: red; font-weight: bold; text-decoration: none;">==</ins>==</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">for the &quot;open sesame&quot; rule, replace &quot;-A INPUT&quot; by &quot;-I INPUT&quot; (the last rule is a generic DROP one, and control would never reach the appended rule)</td><td> </td><td style="background: #eee; font-size: smaller;">for the &quot;open sesame&quot; rule, replace &quot;-A INPUT&quot; by &quot;-I INPUT&quot; (the last rule is a generic DROP one, and control would never reach the appended rule)</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"> </td><td colspan="2">&nbsp;</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">==Configure LD PATH because we can't change /etc/ld.so.conf==</td><td> </td><td style="background: #eee; font-size: smaller;">==Configure LD PATH because we can't change /etc/ld.so.conf==</td></tr> </table> Thu, 14 Dec 2006 04:02:58 GMT Whiteboy http://wiki.dd-wrt.com/wiki/index.php/Talk:Knockd Whiteboy: /* Install the knockd package */ http://wiki.dd-wrt.com/wiki/index.php?title=Knockd&diff=9237&oldid=prev <p><span class="autocomment">Install the knockd package</span></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 04:02, 14 December 2006</td> </tr> <tr><td colspan="2" align="left"><strong>Line 34:</strong></td> <td colspan="2" align="left"><strong>Line 34:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"> 'ipkg install libpcap'</td><td> </td><td style="background: #eee; font-size: smaller;"> 'ipkg install libpcap'</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">== Install the knockd package ==</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">=</ins>== Install the knockd package <ins style="color: red; font-weight: bold; text-decoration: none;">=</ins>==</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"> -Find the '''knockd''' package in the [http://nthill.free.fr/openwrt/tracker/packages/ OpenWRT Package Tracker].&lt;br&gt; You will need the URI of package to install it.&lt;br&gt;</td><td> </td><td style="background: #eee; font-size: smaller;"> -Find the '''knockd''' package in the [http://nthill.free.fr/openwrt/tracker/packages/ OpenWRT Package Tracker].&lt;br&gt; You will need the URI of package to install it.&lt;br&gt;</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"> -telnet or ssh shell into the router</td><td> </td><td style="background: #eee; font-size: smaller;"> -telnet or ssh shell into the router</td></tr> </table> Thu, 14 Dec 2006 04:02:37 GMT Whiteboy http://wiki.dd-wrt.com/wiki/index.php/Talk:Knockd Whiteboy: /* Installation */ http://wiki.dd-wrt.com/wiki/index.php?title=Knockd&diff=9236&oldid=prev <p><span class="autocomment">Installation</span></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 04:02, 14 December 2006</td> </tr> <tr><td colspan="2" align="left"><strong>Line 34:</strong></td> <td colspan="2" align="left"><strong>Line 34:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"> 'ipkg install libpcap'</td><td> </td><td style="background: #eee; font-size: smaller;"> 'ipkg install libpcap'</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">==<del style="color: red; font-weight: bold; text-decoration: none;">Installation</del>==</td><td>+</td><td style="background: #cfc; font-size: smaller;">== <ins style="color: red; font-weight: bold; text-decoration: none;">Install the knockd package </ins>==</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"> -Find the '''knockd''' package in the [http://nthill.free.fr/openwrt/tracker/packages/ OpenWRT Package Tracker].&lt;br&gt; You will need the URI of package to install it.&lt;br&gt;</td><td> </td><td style="background: #eee; font-size: smaller;"> -Find the '''knockd''' package in the [http://nthill.free.fr/openwrt/tracker/packages/ OpenWRT Package Tracker].&lt;br&gt; You will need the URI of package to install it.&lt;br&gt;</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"> -telnet or ssh shell into the router</td><td> </td><td style="background: #eee; font-size: smaller;"> -telnet or ssh shell into the router</td></tr> </table> Thu, 14 Dec 2006 04:02:28 GMT Whiteboy http://wiki.dd-wrt.com/wiki/index.php/Talk:Knockd Whiteboy: /* Install the libpcap package */ http://wiki.dd-wrt.com/wiki/index.php?title=Knockd&diff=9235&oldid=prev <p><span class="autocomment">Install the libpcap package</span></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 04:01, 14 December 2006</td> </tr> <tr><td colspan="2" align="left"><strong>Line 20:</strong></td> <td colspan="2" align="left"><strong>Line 20:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">= Installation =</td><td> </td><td style="background: #eee; font-size: smaller;">= Installation =</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">==Install the libpcap package==</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">=</ins>==Install the libpcap package<ins style="color: red; font-weight: bold; text-decoration: none;">=</ins>==</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">''Knockd depends on libpcap's presence. If it isn't installed, install it''</td><td> </td><td style="background: #eee; font-size: smaller;">''Knockd depends on libpcap's presence. If it isn't installed, install it''</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"> -telnet or ssh shell into the router</td><td> </td><td style="background: #eee; font-size: smaller;"> -telnet or ssh shell into the router</td></tr> </table> Thu, 14 Dec 2006 04:01:59 GMT Whiteboy http://wiki.dd-wrt.com/wiki/index.php/Talk:Knockd Whiteboy at 03:51, 14 December 2006 http://wiki.dd-wrt.com/wiki/index.php?title=Knockd&diff=9234&oldid=prev <p></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 03:51, 14 December 2006</td> </tr> <tr><td colspan="2" align="left"><strong>Line 7:</strong></td> <td colspan="2" align="left"><strong>Line 7:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">A knock sequence of connecting with either udp or tcp on port 1, followed by port 2, followed by port 3, followed by port 4, followed by port 5 could be used to launch a script that closes all ports on the router, or even disables the WAN port for 60 seconds before bringing it back up. In this way you are protecting yourself from attackers as soon as a port scan is detected.</td><td> </td><td style="background: #eee; font-size: smaller;">A knock sequence of connecting with either udp or tcp on port 1, followed by port 2, followed by port 3, followed by port 4, followed by port 5 could be used to launch a script that closes all ports on the router, or even disables the WAN port for 60 seconds before bringing it back up. In this way you are protecting yourself from attackers as soon as a port scan is detected.</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">:''It is recommended that you know how to:''&lt;br&gt;</td><td> </td><td style="background: #eee; font-size: smaller;">:''It is recommended that you know how to:''&lt;br&gt;</td></tr> <tr><td colspan="2" align="left"><strong>Line 19:</strong></td> <td colspan="2" align="left"><strong>Line 20:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">= Installation =</td><td> </td><td style="background: #eee; font-size: smaller;">= Installation =</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">== Prerequisites ==</td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"> ''You should already have:''</td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"> -a Linksys WRT54G product</td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"> -DD-WRT installed as the firmware</td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"> -Good knowledge of the [[Telnet/SSH and the Command Line#The DD-WRT Command Line|command line]]</td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"> -[[Telnet/SSH and the Command Line#SCP|SCP]] or some other way to copy files to and from your desktop setup</td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"> -some knowledge of using [[ipkg]] to install packages</td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"> -[[jffs]] already configured if you don't want to install to ram</td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"> ''If you're running Windows on your desktop:''</td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"> -[http://vim.org/ Vim], [http://www.gena01.com/win32pad/win32pad_1_5_7.exe Win32Pad], [http://www.crimsoneditor.com/ Crimson Editor] or [http://www.flos-freeware.ch/notepad2.html Notepad2]&lt;br&gt; (or other *nix friendly text editor. DO NOT USE NOTEPAD)</td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"></td><td colspan="2">&nbsp;</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">==Install the libpcap package==</td><td> </td><td style="background: #eee; font-size: smaller;">==Install the libpcap package==</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">''Knockd depends on libpcap's presence. If it isn't installed, install it''</td><td> </td><td style="background: #eee; font-size: smaller;">''Knockd depends on libpcap's presence. If it isn't installed, install it''</td></tr> </table> Thu, 14 Dec 2006 03:51:33 GMT Whiteboy http://wiki.dd-wrt.com/wiki/index.php/Talk:Knockd Whiteboy at 03:51, 14 December 2006 http://wiki.dd-wrt.com/wiki/index.php?title=Knockd&diff=9233&oldid=prev <p></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 03:51, 14 December 2006</td> </tr> <tr><td colspan="2" align="left"><strong>Line 8:</strong></td> <td colspan="2" align="left"><strong>Line 8:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">A knock sequence of connecting with either udp or tcp on port 1, followed by port 2, followed by port 3, followed by port 4, followed by port 5 could be used to launch a script that closes all ports on the router, or even disables the WAN port for 60 seconds before bringing it back up. In this way you are protecting yourself from attackers as soon as a port scan is detected.</td><td> </td><td style="background: #eee; font-size: smaller;">A knock sequence of connecting with either udp or tcp on port 1, followed by port 2, followed by port 3, followed by port 4, followed by port 5 could be used to launch a script that closes all ports on the router, or even disables the WAN port for 60 seconds before bringing it back up. In this way you are protecting yourself from attackers as soon as a port scan is detected.</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">:''It is recommended that you know how to:''</td><td>+</td><td style="background: #cfc; font-size: smaller;">:''It is recommended that you know how to:''<ins style="color: red; font-weight: bold; text-decoration: none;">&lt;br&gt;</ins></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">... use the [[Telnet/SSH and the Command Line#The DD-WRT Command Line|command line]]</td><td>+</td><td style="background: #cfc; font-size: smaller;">... use the [[Telnet/SSH and the Command Line#The DD-WRT Command Line|command line]]<ins style="color: red; font-weight: bold; text-decoration: none;">&lt;br&gt;</ins></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">... have the ability with [[Telnet/SSH and the Command Line#SCP|SCP]] to copy files to and from your desktop setup</td><td>+</td><td style="background: #cfc; font-size: smaller;">... have the ability with [[Telnet/SSH and the Command Line#SCP|SCP]] to copy files to and from your desktop setup<ins style="color: red; font-weight: bold; text-decoration: none;">&lt;br&gt;</ins></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">... have knowledge of using [[ipkg]] to install packages</td><td>+</td><td style="background: #cfc; font-size: smaller;">... have knowledge of using [[ipkg]] to install packages<ins style="color: red; font-weight: bold; text-decoration: none;">&lt;br&gt;</ins></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">... [[jffs]] configured if you don't want to install to ram</td><td>+</td><td style="background: #cfc; font-size: smaller;">... [[jffs]] configured if you don't want to install to ram<ins style="color: red; font-weight: bold; text-decoration: none;">&lt;br&gt;</ins></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">'''If you're running Windows on your desktop you need:'''</td><td> </td><td style="background: #eee; font-size: smaller;">'''If you're running Windows on your desktop you need:'''</td></tr> </table> Thu, 14 Dec 2006 03:51:12 GMT Whiteboy http://wiki.dd-wrt.com/wiki/index.php/Talk:Knockd