LINUX.IE, website of the Irish Linux Users' Group
Tux rules!

   
Home
New Users
Articles
Download
Projects
Community
Vendors

  Print Version
Email to...
 
Archives:


planetILUG

Recent News

News Archive


Join the
ILUG
on FaceBook


Join the
ILUG
on LinkedIn


Join the
ILUG SETI
Group



















 
 :: Mailing Lists

[ILUG] Maintaining an IP whitelist with dynamic addresses

[ILUG] Maintaining an IP whitelist with dynamic addresses

Niall O Broin niall at linux.ie
Tue Jun 7 20:45:05 IST 2005


On 7 Jun 2005, at 20:28, John Madden wrote:

> It's not exactly what you want, but have you looked at port knocking? 
> It
> should be simple enough to set up iptables to log traffic to certain
> specific ports, have a script tail the log file waiting for a specific
> sequence, then add an ACCEPT rule for the source IP address? Security
> through obscurity, I know, but it should suffice for what you want
> (presuming the client side can handle random packets to random ports as
> the "knocking").

Somebody else suggested this, but it's not on - some of the clients are 
Mac and Windows users using GUI SFTP clients. The "it just works-ness" 
of the current situation has to continue.



Niall




More information about the ILUG mailing list
Read this without the formatting.
                                                                                                    

 

Hosted by HEAnet


Maintained by the ILUG website team. The aim of Linux.ie is to support and help commercial and private users of Linux in Ireland. You can display ILUG news in your own webpages, read backend information to find out how. Networking services kindly provided by HEAnet, server kindly donated by Dell. Linux is a trademark of Linus Torvalds, used with permission. No penguins were harmed in the production or maintenance of this highly praised website. Looking for the Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!
RSS Version
Powered by Dell