Re: Suggestion for a new feature, port code

Article View: bit.listserv.openbsd-pf

Article #65

Back to bit.listserv.openbsd-pf Previous Next

#65

From: Johan Söderberg
Date: Tue, 01 Mar 2011 14:11

32 lines
1685 bytes

spamassassinexception

Thank you so much for your input!
If I change the knock ports every time I log in, I should be fine, right?
Please comment on my ruleset, brain fart again?

knock1 = "11111"
knock2 = "22222"
open = "22"

block drop in all

block drop quick on $extif inet proto tcp \
from any to $extaddr port $knock1 \
tag knock1

block drop quick on $extif inet proto tcp \
from any to $extaddr port != $knock2 \
tagged knock1 tag knock

block drop quick log on $extif inet proto tcp \
from any to $extaddr port $knock2 \
tagged knock1 tag knock2

block drop quick log on $extif inet proto tcp \
from any to $extaddr port != $open \
tagged knock2 tag knock

pass in quick log on $extif inet proto tcp \
from any to $extaddr port $open \
modulate state (max 1) \
tagged knock2

Technical Details

Message-ID: <AANLkTi=Q9hSKOnOHz34E2chAM1+0kyC5oZV=VQN8DRtq@mail.gmail.com>

Path:

arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!npeer01.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!newsgate.newsguy.com!newsp.newsguy.com!mdrn

References: <AANLkTi=WMDi8P+tP4jX9tPGX-BD9CjFugKv9=XacUwxM@mail.gmail.com>

Show Full Headers

Complete Article Headers

X-Google-Thread: ff4ef,aafa9bd10f63de1e
X-Google-NewGroupId: yes
X-Google-Attributes: gidbffa70e3,domainid0,public,usenet
X-Google-Language: ENGLISH,ASCII-7-bit
Path: arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!npeer01.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!newsgate.newsguy.com!newsp.newsguy.com!mdrn
From: johan.s.umea@gmail.com (Johan Söderberg)
Newsgroups: bit.listserv.openbsd-pf
Subject: Re: Suggestion for a new feature, port code
Date: 1 Mar 2011 06:11:28 -0800
Organization: None
Lines: 32
Message-ID: <AANLkTi=Q9hSKOnOHz34E2chAM1+0kyC5oZV=VQN8DRtq@mail.gmail.com>
References: <AANLkTi=WMDi8P+tP4jX9tPGX-BD9CjFugKv9=XacUwxM@mail.gmail.com>
NNTP-Posting-Host: localhost.newsguy.com
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
NNTP-Posting-Date: 1 Mar 2011 14:11:28 GMT

Reply to Parent Message