Comment on What are your methods to harden *nix servers?

iii@mander.xyz ⁨3⁩ ⁨weeks⁩ ago

• HorreC@lemmy.world ⁨3⁩ ⁨weeks⁩ ago

  I have used this with second port for handshake (with no info in heading and 20 second times) and then the final port opens with key exchanged from handshake.

  source
• Cyber@feddit.uk ⁨3⁩ ⁨weeks⁩ ago

  Would you use that on internal LAN connections or only external internet facing connections? I’m not aware (not checked) if any firewalls support it… not sure why?

  source

  • iii@mander.xyz ⁨3⁩ ⁨weeks⁩ ago

    With knockd you can execute arbitrary commands upon a port knocking sequence. So any application that is configurable via terminal is eligible. Here’s a tutorial of knockd+iptables (1). Alternativly there’s (2).

    You can use it wherever, as part of security in depth. It’ll have it’s largest effect on publicly facing interfaces. It does not replace having a proper ssh setup (disabling root, keys only, etc).

    source

    • Cyber@feddit.uk ⁨3⁩ ⁨weeks⁩ ago

      Thanks for the links, I’ll take a look as I’ve never actually played with port knocking.

      source