dgl.cx

SSH port knocking with OpenBSD 7.9

Port knocking is mostly a bad idea. But people keep wanting to do it, for some false sense of security. If you don't consider it a security control but a way to keep garbage out of your logs, it might be valid. Here's one way to do it with OpenBSD's pf. More..