软件包：fwknop-server（2.6.11-1） [debports]
FireWall KNock OPerator server side - C version
The FireWall KNock OPerator implements an authorization scheme called Single Packet Authorization (SPA), based on Netfilter and libpcap.
Its main application is to protect services such as OpenSSH with an additional layer of security in order to make the exploitation of vulnerabilities (both 0-day and unpatched code) much more difficult.
The authorization server passively listens for authorization packets via libpcap, thus preventing any connections from being processed on the traditional port. Access to a protected service is only granted after a valid encrypted and non-replayed packet is detected.
其他与 fwknop-server 有关的软件包
|
|
|
|
-
- dep: init-system-helpers (>= 1.54~)
- 所有初始化系统的帮助工具
-
- dep: iptables
- administration tools for packet filtering and NAT
-
- dep: libc6 (>= 2.37)
- GNU C 语言运行库：共享库
同时作为一个虚包由这些包填实： libc6-udeb
-
- dep: libfko3t64 (= 2.6.11-1)
- FireWall KNock OPerator - shared library
-
- dep: libnetfilter-queue1 (>= 1.0.0)
- Netfilter netlink-queue library
-
- dep: libnfnetlink0 (>= 1.0.2)
- Netfilter netlink library
-
- sug: fwknop-apparmor-profile
- FireWall KNock OPerator - Apparmor profile