DSM-G600, DNS-3xx and NSA-220 Hack Forum

that's a waste of ram. use key files instead.

I've been thinking about this post since this morning as I've never heard of knockd before and have been trying to think if it's a good idea or not... in the end I've decided that surely having ports open on your firewall/forwarded through nat to the dns-323 for this to work is a bad thing? You can tell if a nat firewall is forwarding ports - even if it's only by the few ms extra that it takes to reject the connection, so narrowing down which ports are open won't be a problem, and then hitting them in the right order won't take long unless you have loads of ports open/forwarded which is definitely not a good thing. I can see that this may be a good thing if you have a red side/dmz box (i.e: something open to the world anyway and not requiring ports forwarded to it - remember ftp is enabled by default on the dns-323 which sends passwords plain text so red-side = bad!) that will receive the "knocks" on the ports anyway... but surely it's better to keep as many ports closed as possible rather than having 11 ports open, 10 for the knock sequence and 1 for ssh (as an example)

Hi Wintermute,

there is an untested version from the optware feed but I can see that you have compiled your own.
http://ipkg.nslu2-linux.org/feeds/optwa … /unstable/