Parcourir la source

konckd allowing ssh without ip restriction as it would not work with 4g connection

Bachir Soussi Chiadmi il y a 6 ans
Parent
commit
d8fe6562ae
1 fichiers modifiés avec 4 ajouts et 2 suppressions
  1. 4 2
      assets/knockd.conf

+ 4 - 2
assets/knockd.conf

@@ -19,7 +19,9 @@
       sequence    = 7000,8000,9000
       sequence    = 7000,8000,9000
       seq_timeout = 5
       seq_timeout = 5
       # TODO do not limit port 22 to the ip as it don't work with 4G connection
       # TODO do not limit port 22 to the ip as it don't work with 4G connection
-      start_command = ufw insert 1 allow from %IP% to any port 22
+      # start_command = ufw insert 1 allow from %IP% to any port 22
+      start_command = ufw allow ssh
       tcpflags    = syn
       tcpflags    = syn
       cmd_timeout   = 600
       cmd_timeout   = 600
-      stop_command  = ufw delete allow from %IP% to any port 22
+      # stop_command  = ufw delete allow from %IP% to any port 22
+      stop_command  = ufw delete allow ssh