fwknop - A Single Packet Authorization (SPA) implementation

Property Value
Distribution Fedora 29
Repository Fedora i386
Package filename fwknop-2.6.10-1.fc29.i686.rpm
Package name fwknop
Package version 2.6.10
Package release 1.fc29
Package architecture i686
Package type rpm
Category System Environment/Daemons
Homepage http://www.cipherdyne.org/fwknop/
License GPLv2
Maintainer -
Download size 201.34 KB
Installed size 533.45 KB
fwknop implements an authorization scheme known as Single Packet
Authorization (SPA) that requires only a single encrypted packet to
communicate various pieces of information including desired access through an
iptables policy and/or specific commands to execute on the target system.
The main application of this program is to protect services such as SSH with
an additional layer of security in order to make the exploitation of
vulnerabilities (both 0-day and unpatched code) much more difficult.  The
authorization server passively monitors authorization packets via libpcap and
hence there is no "server" to which to connect in the traditional sense.  Any
service protected by fwknop is inaccessible (by using iptables to
intercept packets within the kernel) before authenticating; anyone scanning for
the service will not be able to detect that it is even listening.  This
authorization scheme offers many advantages over port knocking, include being
non-replayable, much more data can be communicated, and the scheme cannot be
broken by simply connecting to extraneous ports on the server in an effort to
break knock sequences.  The authorization packets can easily be spoofed as
well, and this makes it possible to make it appear as though, say,
www.yahoo.com is trying to authenticate to a target system but in reality the
actual connection will come from a seemingly unrelated IP. Although the
default data collection method is to use libpcap to sniff packets off the
wire, fwknop can also read packets out of a file that is written by the
iptables ulogd pcap writer or by a separate sniffer process.


Package Version Architecture Repository
fwknop-2.6.10-1.fc29.x86_64.rpm 2.6.10 x86_64 Fedora
fwknop-2.6.10-1.fc29.i686.rpm 2.6.10 i686 Fedora
fwknop - - -


Name Value
/sbin/ldconfig -
libc.so.6(GLIBC_2.28) -
libgpgme.so.11 -
libgpgme.so.11(GPGME_1.0) -
libgpgme.so.11(GPGME_1.1) -
libpcap.so.1 -
logrotate -
rtld(GNU_HASH) -
systemd -


Name Value
config(fwknop) = 2.6.10-1.fc29
fwknop = 2.6.10-1.fc29
fwknop(x86-32) = 2.6.10-1.fc29
libfko.so.3 -


Type URL
Mirror download-ib01.fedoraproject.org
Binary Package fwknop-2.6.10-1.fc29.i686.rpm
Source Package fwknop-2.6.10-1.fc29.src.rpm

Install Howto

Install fwknop rpm package:

# dnf install fwknop




2018-08-07 - Jakub Jelen <jjelen@redhat.com> - 2.6.10-1
- New upstream release (#1613332)
2018-07-13 - Fedora Release Engineering <releng@fedoraproject.org> - 2.6.9-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
2018-02-07 - Fedora Release Engineering <releng@fedoraproject.org> - 2.6.9-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
2017-08-02 - Fedora Release Engineering <releng@fedoraproject.org> - 2.6.9-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
2017-07-26 - Fedora Release Engineering <releng@fedoraproject.org> - 2.6.9-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
2017-02-10 - Fedora Release Engineering <releng@fedoraproject.org> - 2.6.9-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
2016-12-10 - Igor Gnatenko <i.gnatenko.brain@gmail.com> - 2.6.9-2
- Rebuild for gpgme 1.18

See Also

Package Description
fwknop-devel-2.6.10-1.fc29.i686.rpm The fwknop library, header and API docs
fwknop-gui-1.3.1-7.fc29.i686.rpm GUI client for Fwknop
fwrestart-1.08-12.fc29.noarch.rpm A way to more safely re-load firewall rules remotely
fwsnort-1.6.5-12.fc29.noarch.rpm Translates Snort rules into equivalent iptables rules
fwts-18.06.02-2.fc29.i686.rpm Firmware Test Suite
fwupd-1.1.2-1.fc29.i686.rpm Firmware update daemon
fwupd-devel-1.1.2-1.fc29.i686.rpm Development package for fwupd
fwupd-tests-1.1.2-1.fc29.noarch.rpm Data files for installed tests
fwupdate-11-4.fc29.i686.rpm Tools to manage UEFI firmware updates
fwupdate-devel-11-4.fc29.i686.rpm Development headers for libfwup
fwupdate-efi-11-4.fc29.i686.rpm UEFI binaries used by libfwup
fwupdate-libs-11-4.fc29.i686.rpm Library to manage UEFI firmware updates
fxload-2008_10_13-11.fc29.i686.rpm A helper program to download firmware into FX and FX2 EZ-USB devices
fzf-0.17.4-2.fc29.i686.rpm A command-line fuzzy finder written in Go
g2clib-devel-1.6.0-5.fc29.i686.rpm Development files for g2clib