knockd.conf 397 B

123456789101112
  1. [options]
  2. logfile = /var/log/knockd.log
  3. [SSH]
  4. sequence = 7000,8000,9000
  5. seq_timeout = 5
  6. # start_command = /usr/sbin/iptables -A INPUT -p tcp --dport 22 -j ACCEPT
  7. start_command = ufw allow ssh
  8. tcpflags = syn
  9. cmd_timeout = 600
  10. # stop_command = /usr/sbin/iptables -D INPUT -p tcp --dport 22 -j ACCEPT
  11. stop_command = ufw delete allow ssh