Re: Reflexive firewalls?

[<nobledark () hushmail com>]

Sounds a bit like "port-knocking" or the newer version, "Single 
Packet Auth" (SPA). There is a app called fwknop that does this - 
google for the site, I don't have it in front of me right now.

 - Nd

On Thu, 27 Dec 2007 13:02:55 -0500 Danilo Chilene 
<dchilene () impsat com> wrote:
> I know how do this with PF.
>
> Don't have any idea with iptables. :(
>
> Ong Chin Kiat wrote:
> > Hi list,
> >
> > I've recently used an SSH server that had an interesting
> > authentication mechanism. You first had to telnet to the machine 
> on a
> > certain port. After doing this (it will just time out - no 
> prompt),
> > you then SSH to the server in question. The telnet step has to 
> be
> > carried out, if not SSH will just time out.
> >
> > My question is, is this called reflexive firewalling, and can I
> > duplicate this with iptables?
> >
> > Thanks.
>
> -- 
> Danilo F. Chilene
>
> Especialista SO
>
> Global Crossing Limited
>
> Tel.: (55 11) 3957-2945
>
> Cel.: (55 11) 8231-1851
>
> danilo.chilene () globalcrossing com
>
>
> www.globalcrossing.com

--
Free info for small business owners.  Click here to find great products geared for your business.
http://tagline.hushmail.com/fc/Ioyw6h4eDJaL5AujMY5x4OSJtZWNMLjr322VTQZXvjsEuNPtmgGORG/
> Att,