fixed knockd
This commit is contained in:
@@ -1,15 +1,10 @@
|
||||
[options]
|
||||
UseSyslog
|
||||
|
||||
[openSSH]
|
||||
sequence = 7000,8000,9000
|
||||
seq_timeout = 5
|
||||
command = /sbin/iptables -A INPUT -s %IP% -p tcp --dport 22 -j ACCEPT
|
||||
tcpflags = syn
|
||||
|
||||
[closeSSH]
|
||||
sequence = 9000,8000,7000
|
||||
seq_timeout = 5
|
||||
command = /sbin/iptables -D INPUT -s %IP% -p tcp --dport 22 -j ACCEPT
|
||||
tcpflags = syn
|
||||
logfile = /var/log/knockd.log
|
||||
|
||||
[SSH]
|
||||
sequence = 7000,8000,9000
|
||||
seq_timeout = 5
|
||||
start_command = ufw allow from %IP% to any port 22
|
||||
tcpflags = syn
|
||||
cmd_timeout = 10
|
||||
stop_command = ufw delete allow from %IP% to any port 22
|
||||
|
Reference in New Issue
Block a user