Fri, 29 Mar 2024 20:02:31 CST | login

Information for build fwknop-2.6.10-11.fc37

ID19254
Package Namefwknop
Version2.6.10
Release11.fc37
Epoch
Sourcegit+https://src.fedoraproject.org/rpms/fwknop.git#32cad876e144528c4a2e80d3c6706d0dec9f4773
SummaryA Single Packet Authorization (SPA) implementation
Descriptionfwknop implements an authorization scheme known as Single Packet Authorization (SPA) that requires only a single encrypted packet to communicate various pieces of information including desired access through an iptables policy and/or specific commands to execute on the target system. The main application of this program is to protect services such as SSH with an additional layer of security in order to make the exploitation of vulnerabilities (both 0-day and unpatched code) much more difficult. The authorization server passively monitors authorization packets via libpcap and hence there is no "server" to which to connect in the traditional sense. Any service protected by fwknop is inaccessible (by using iptables to intercept packets within the kernel) before authenticating; anyone scanning for the service will not be able to detect that it is even listening. This authorization scheme offers many advantages over port knocking, include being non-replayable, much more data can be communicated, and the scheme cannot be broken by simply connecting to extraneous ports on the server in an effort to break knock sequences. The authorization packets can easily be spoofed as well, and this makes it possible to make it appear as though, say, www.yahoo.com is trying to authenticate to a target system but in reality the actual connection will come from a seemingly unrelated IP. Although the default data collection method is to use libpcap to sniff packets off the wire, fwknop can also read packets out of a file that is written by the iptables ulogd pcap writer or by a separate sniffer process.
Built bykojiadmin
State complete
Volume DEFAULT
StartedWed, 25 Jan 2023 04:59:38 CST
CompletedWed, 25 Jan 2023 05:24:43 CST
Taskbuild (f37-build-side-32-misc-devel, /rpms/fwknop.git:32cad876e144528c4a2e80d3c6706d0dec9f4773)
Extra{'source': {'original_url': 'git+https://src.fedoraproject.org/rpms/fwknop.git#32cad876e144528c4a2e80d3c6706d0dec9f4773'}}
Tags
f37-build-side-32-misc-devel
f37-updates
RPMs
src
fwknop-2.6.10-11.fc37.src.rpm (info) (download)
riscv64
fwknop-2.6.10-11.fc37.riscv64.rpm (info) (download)
fwknop-devel-2.6.10-11.fc37.riscv64.rpm (info) (download)
fwknop-debuginfo-2.6.10-11.fc37.riscv64.rpm (info) (download)
fwknop-debugsource-2.6.10-11.fc37.riscv64.rpm (info) (download)
Logs
riscv64
root.log
state.log
hw_info.log
installed_pkgs.log
build.log
mock_output.log
Changelog * Thu Jul 21 2022 Fedora Release Engineering <releng@fedoraproject.org> - 2.6.10-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Thu Jan 20 2022 Fedora Release Engineering <releng@fedoraproject.org> - 2.6.10-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Wed Jul 21 2021 Fedora Release Engineering <releng@fedoraproject.org> - 2.6.10-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Tue Mar 02 2021 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.6.10-8 - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. * Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 2.6.10-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Mon Jul 27 2020 Fedora Release Engineering <releng@fedoraproject.org> - 2.6.10-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild