republican-creole
Search:  

 
theme to white backgroundlet page decide theme
HomeFind ServiceReviewsISP NewsFAQsForumsToolsDatabaseAbout 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Up and Running » Security » Security » Is Portknocking "Real" Security?
Search Topic:
 Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
Links: ·Hijack This logs? ·Panda Free Tools ·Vundo Removal
how does brutus aet2 works? »
« Black Viper is back! Yes,  
AuthorAll Replies


EGeezer
Go Bobcats
Premium
join:2002-08-04
Country!
·Callcentric
·RoadRunner Cable
·AT&T CallVantage

1 edit		reply to Daniel
Re: Is Portknocking "Real" Security?

this is an interesting discussion, since I'm not familiar with the technical aspects of common portknocking implementations.

The point Daniel made in the second link is an intriguing one -
You are some bad guy with a brand-spankin'-new zero-day SSH exploit. You need victims. You proceed to scan a juicy class B and come back with 5,000 open SSH ports.

Out of the remaining 60,000 plus hosts that didn't have SSH open, how do you attack the portknocked ones?

If portknocking does significantly mitigate or raise the effort bar for such an attack, it would provide value as an added layer. Some thoughts on this?
--
03:14:07 UTC Tuesday, Jan. 19, 2038 - a date that will live in infamy...
to forum · permalink · · 2007-03-31 12:44:26 · Reply to this
Forums » Up and Running » Security » Securityhow does brutus aet2 works? »
« Black Viper is back! Yes,  

Wednesday, 09-Dec 04:47:22 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.
page compression OFF
Most commented news this week
· [194] Sprint Sued For Distracted Driving Death
· [81] 3G Network Test Says AT&T Is Tops
· [72] Mediacom Unveils 105 Mbps Pricing
· [62] Sprint Poised For A Turnaround?
· [50] The Future Of Wi-Fi Is Bright
· [50] WPA Cracker: Test WPA-PSK Networks In 20 Minutes
· [47] Site Leaks Yahoo, Verizon Fed Data Share Pricing
· [44] Microwaving Your Innards Is Not 'Extreme'
· [39] Verizon LTE: 5-12 Mbps Downstream
· [21] AT&T Releases Network Reporting iPhone App
Most people now reading
· Windows 7 boot manager editing questions [Microsoft Help]
· [How to] Install Asterisk on an Asus WL-520GU router [VOIP Tech Chat]
· buffs, nerfs, and 3.3 [World of Warcraft]
· Extjs grid combo box. [Webmasters and Developers]
· ICC Strats??? [World of Warcraft]
· Using DIR-615 C1/3.01 with Trendnet TEW-652BRP in N Mode [D-Link]
· Microsoft Security Bulletin(s) for December 8, 2009 [Security]
· Maximizing Rogue DPS for 3.1 [World of Warcraft]
· [ Classes] ATTN Death Knights - Post your spec for critique! [World of Warcraft]
· Opening a file download dialog from a JavaScript function. [Webmasters and Developers]