Re: This firewall rule will self-destruct

[Benjamin Smith <lists@xxxxxxxxxxxxxxxxxx>]

On Friday 16 March 2007, MrKiwi wrote:
> mitigate a situation 
> where you have no control over an intermediate firewall that 
> only passes port 80

Yes, that's EXACTLY what I'm trying to do... but I dont' see how this exactly 
relates to port knocking. 

Port knocking seems to be that you log connection attempts to various ports 
that are otherwise closed, EG: 

iptables -I input -p tcp -j DENY -l 

and then watch the log file for a specific, exact sequence of connections from 
a common source IP. How would that help me here? Are you suggesting that I 
log the inbound port 80, and then watch the logfile with a background 
script/daemon  to clear out the rules? 
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos