Search:  

 
theme to white backgroundlet page decide theme
HomeFind ServiceReviewsISP NewsFAQsForumsToolsDatabaseAbout 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Up and Running » Security » Security » Is Portknocking "Real" Security?
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
Links: ·Hijack This logs? ·Panda Free Tools ·Vundo Removal
how does brutus aet2 works? »
« Black Viper is back! Yes,  

Name Game
Premium
join:2002-07-07
North Myrtle Beach, SC

Re: Is Portknocking "Real" Security?

The concept of portknocking from the day's it was proposed using firewall logs changed into a "secret knock" thingie is like giving your neighbor a key to you cottage and trust him to protect it. Not only protect the "key"..but also your place. You do not know where he will store the key muchless when "he" enters your cottage if it was really his muddy feet in the buffer overflow.

If you are looking for peace of mind Security..the weighted scale is against portknocking..but if you are just after a new whistle and bell "feature" then go for it..it does not ADD anything to real security..it just throw another problem into the equation...no matter how secure you think you are doing it.

I will be standing in the hallway
»www.songlyrics.com/song-lyrics/O···534.html

"Knock three times
On the ceiling if you want me.
Mmm-hmm, twice on the pipe
If the answer is no."
--
Gladiator Security Forum »www.gladiator-antivirus.com/ Missing Kids »www.missingkids.com/
permalink · 2007-03-30 11:29:01 · Print · Reply to this

Daniel
Premium,MVM
join:2000-06-26
Pleasanton, CA
clubs:

2 edits

Re: Is Portknocking "Real" Security?

Your analogy is horribly flawed, Name Game. Nobody gets a "key" to the cottage. A "key" implies that a successful portknock yields a shell via SSH. It doesn't. All a successful portknock gives you is the ability to try one's hand against standard SSH security. No security layers are removed from the equation; one is just added.

Do you still think this is a problem?
--
dmiessler.com -- grep understanding knowledge
permalink · 2007-03-30 11:35:30 · Reply to this
Forums » Up and Running » Security » Securityhow does brutus aet2 works? »
« Black Viper is back! Yes,  

Saturday, 28-Nov 08:29:00 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.
page compression OFF
Most commented news this week
· [121] Time Warner Cable Fires Broadside At Broadcasters
· [112] New AT&T Ad Campaign Hits Back At Verizon
· [96] Apple Joins AT&T Verizon Snark Fest
· [87] New Bill Takes Aim At Higher Verizon ETFs
· [71] TiVo Sees Record Customer Losses
· [69] In-Flight Internet Headed For Bumpy Landing?
· [67] Verizon CEO: Hulu Will Be Dead Soon
· [62] Thanksgiving Open Thread
· [51] Weekend Open Thread
· [40] EFF Wages War On Fine Print
Most people now reading
· Windows 7 boot manager editing questions [Microsoft Help]
· 3.x Feral Druid - Bear Tanking Guide [World of Warcraft]
· Is Gear Score now the new requirement to get pug invite? [World of Warcraft]
· [Newsgroups] Newzleech down? [Filesharing Software]
· Use MagicJack on Linux, PPC Mac [MagicJack]
· What to use while demonoid is down? [Filesharing Software]
· Nvidia Forceware for Windows XP\2000\03 195.62 [Software]
· speedtouch 516 -- frequent DSL drops [TekSavvy]
· Why does it take so long? Mail question [General Questions]
· HOW-TO: QoS and Tomato (fixes "choppy voice") [MagicJack]