RE: Reflexive firewalls?

["Jason M. Beauford" <jbeauford () subropartners com>]

Port triggering, or Port Knocking.

heres the first url I found:

Multiple-port knocking Netfilter/IPtables only implementation
http://www.debian-administration.org/articles/268

 
jmb

-----Original Message-----
From: Tom Corelis [mailto:tomc () targetbilling com] 
Sent: Thursday, December 27, 2007 12:41 PM
To: security-basics () securityfocus com
Subject: RE: Reflexive firewalls?

Would this be called port triggering? I've seen a few commercial router
boxes that support that feature, though I've never looked into it
myself.

tom


--
Tom

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Danilo Chilene
Sent: Thursday, December 27, 2007 10:03 AM
To: Ong Chin Kiat
Cc: security-basics () securityfocus com
Subject: Re: Reflexive firewalls?

I know how do this with PF.

Don't have any idea with iptables. :(

Ong Chin Kiat wrote:
> Hi list,
>
> I've recently used an SSH server that had an interesting 
> authentication mechanism. You first had to telnet to the machine on a 
> certain port. After doing this (it will just time out - no prompt), 
> you then SSH to the server in question. The telnet step has to be 
> carried out, if not SSH will just time out.
>
> My question is, is this called reflexive firewalling, and can I 
> duplicate this with iptables?
>
> Thanks.

--
Danilo F. Chilene

Especialista SO

Global Crossing Limited

Tel.: (55 11) 3957-2945

Cel.: (55 11) 8231-1851

danilo.chilene () globalcrossing com

 
www.globalcrossing.com

 

Att,