• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Portknocking-Daemon-GUI or Package –> {CANCELED}

Scheduled Pinned Locked Moved Expired/Withdrawn Bounties
42 Posts 9 Posters 26.1k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • H
    heiko
    last edited by Mar 24, 2007, 9:51 PM

    Hello Daniel,
    please search the forum….too much money?
    Greetings from Germany

    1 Reply Last reply Reply Quote 0
    • H
      heiko
      last edited by Mar 24, 2007, 10:00 PM

      please take a look at the time-based-rule thread…..

      1 Reply Last reply Reply Quote 0
      • H
        heiko
        last edited by Mar 25, 2007, 6:28 PM

        has anybody interest in "portknocking", otherwise i will kill the offer….

        Now i boost the bounty to 350 €. That´s it.

        1 Reply Last reply Reply Quote 0
        • S
          sullrich
          last edited by Mar 25, 2007, 6:42 PM

          I am interested but we need to finish the time based rules support.

          1 Reply Last reply Reply Quote 0
          • H
            heiko
            last edited by Mar 25, 2007, 6:56 PM

            but with killing of the states at the expiration! ;D

            Do you really interested? We can arrange a little bit later, 4 weeks i think. I go to russia in 6-8 weeks and change checkpoint to PFSENSE.

            1 Reply Last reply Reply Quote 0
            • N
              nima.m
              last edited by Mar 25, 2007, 7:48 PM

              Heiko,
              Are you going to replace Nokia Checkpoint firewall with Pfsense ?

              Nokia Checkpoint firewall  is one the most advance firewall that corporate use these days.

              Scott, you must be very proud now, aren't you ? :-)

              1 Reply Last reply Reply Quote 0
              • H
                heiko
                last edited by Mar 25, 2007, 8:12 PM

                Yes i do, on our own hardware, not nokia, we change checkpoint to pfsense…..checkpoint ist really good, but you need for each loacation a truck of money for support, upgrade etc. ......

                i can map all my feature requests with pfsense, and i don´t know about portknocking on Checkpoint ;D
                Greetings from germany
                heiko

                --> i would rather speak about this bounty and portknocking.

                --> Anybody interest?? really?? Not minor points! Excuse me........

                1 Reply Last reply Reply Quote 0
                • H
                  heiko
                  last edited by Mar 26, 2007, 9:45 PM

                  Hello,

                  the bounty is now set to 500 €. We can arrange anything of this bounty up to the due state " 01.05.2007". Thereafter i will kill this bounty.

                  Greetings
                  heiko

                  1 Reply Last reply Reply Quote 0
                  • J
                    Justinw
                    last edited by Mar 28, 2007, 7:12 PM

                    Outside the US most people do day/month/year if that makes more sense to people reading this post, not that it is my place, but I thought it needed to be clarified.  So if I'm reading it right, it won't be over for a month and a half

                    1 Reply Last reply Reply Quote 0
                    • H
                      heiko
                      last edited by Mar 28, 2007, 7:31 PM

                      Excuse me, the german date translation is for other people abnormal, i think..

                      The offer will be dropped at Year = 2007 ; Month = Mai, Day = 01

                      I hope, this is undestandable.
                      Greetings
                      heiko

                      1 Reply Last reply Reply Quote 0
                      • S
                        sullrich
                        last edited by Mar 28, 2007, 8:16 PM

                        I will be taking this one on as soon as you declare time based rules a success.

                        1 Reply Last reply Reply Quote 0
                        • H
                          heiko
                          last edited by Mar 28, 2007, 8:57 PM

                          OK, i am await for finished time based ruled system.Then we could arrange "portknocking"
                          greetings
                          heiko

                          1 Reply Last reply Reply Quote 0
                          • H
                            heiko
                            last edited by Mar 29, 2007, 10:30 AM

                            Hello Scott,
                            one Extension: I want to blocking countries and i know from another thread, that this is implemented in HEAD. Can you backported this to a productive PFSENSE-RELENG-SNAPSHOT Version?

                            Portknocking = 500 €
                            Blocking-Countries= 250 €

                            Do you disposed to this extension. It would be very nice?

                            I know, i am a nag…. :)
                            Greetings from Germany
                            heiko

                            1 Reply Last reply Reply Quote 0
                            • S
                              sullrich
                              last edited by Mar 29, 2007, 3:21 PM

                              No, I am affraid not.  We are about to enter beta status as soon as the final Time Based Rules bugs are fixed.

                              Sorry!  Maybe on next version.

                              1 Reply Last reply Reply Quote 0
                              • H
                                heiko
                                last edited by Mar 29, 2007, 9:32 PM Mar 29, 2007, 9:18 PM

                                OK, thanks, then we can arrange the port knocking when the timebased rules are finished

                                1 Reply Last reply Reply Quote 0
                                • J
                                  JeGr LAYER 8 Moderator
                                  last edited by Apr 5, 2007, 7:52 AM

                                  Don't want to disturb the thread but I'm curious for what you (or people generally) want to use portknocking for and (if that's generally possible doing with pfsense/freebsd/pf) if authpf wouldn't be a better/other approach to the desired result. Coming from the OpenBSD side I used authpf for quite a few thingies, people want portknocking for, so I thought I should maybe throw this in here.

                                  Greets Grey

                                  Don't forget to upvote 👍 those who kindly offered their time and brainpower to help you!

                                  If you're interested, I'm available to discuss details of German-speaking paid support (for companies) if needed.

                                  1 Reply Last reply Reply Quote 0
                                  • S
                                    sullrich
                                    last edited by Apr 5, 2007, 5:28 PM

                                    Yes it is possible: http://doorman.sourceforge.net/

                                    1 Reply Last reply Reply Quote 0
                                    • S
                                      sullrich
                                      last edited by Apr 7, 2007, 8:13 PM

                                      Looks like doorman will not be a suitable package as it requires a client to do the knocking….  Need to find a package that works with PF and does not require a client.

                                      1 Reply Last reply Reply Quote 0
                                      • H
                                        heiko
                                        last edited by Apr 7, 2007, 8:34 PM

                                        i agree with that. The project is on sourceforge not really active, i think?

                                        1 Reply Last reply Reply Quote 0
                                        • C
                                          cmb
                                          last edited by Apr 8, 2007, 12:50 AM Apr 8, 2007, 12:48 AM

                                          Every port knocking daemon is going to require a client. It could be something as simple as a batch file/shell script that telnets to several ports, but they all need a client of some sort. It's no different from OpenVPN, in that it requires a client that we don't provide.

                                          I say start with doorman, if it doesn't work for some technical or compatibility reason, move on to something else.

                                          1 Reply Last reply Reply Quote 0
                                          26 out of 42
                                          • First post
                                            26/42
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                            This community forum collects and processes your personal information.
                                            consent.not_received