# packages

pkgId: 4f195caad18de7cfa7b8b6a6176c5abf7c0cc105bb6082bbfbafcba866be46e1
name: fwknop
arch: src
version: 2.6.10
epoch: 0
release: 3.el7
summary: A Single Packet Authorization (SPA) implementation
url: http://www.cipherdyne.org/fwknop/
rpm_license: GPLv2
rpm_group: Unspecified
rpm_buildhost: 22e3198baa6b43b99f43cf6967c63602
location_href: 01362491-fwknop/fwknop-2.6.10-3.el7.src.rpm
checksum_type: sha256
description:
  fwknop implements an authorization scheme known as Single Packet
  Authorization (SPA) that requires only a single encrypted packet to
  communicate various pieces of information including desired access through an
  iptables policy and/or specific commands to execute on the target system.
  The main application of this program is to protect services such as SSH with
  an additional layer of security in order to make the exploitation of
  vulnerabilities (both 0-day and unpatched code) much more difficult.  The
  authorization server passively monitors authorization packets via libpcap and
  hence there is no "server" to which to connect in the traditional sense.  Any
  service protected by fwknop is inaccessible (by using iptables to
  intercept packets within the kernel) before authenticating; anyone scanning for
  the service will not be able to detect that it is even listening.  This
  authorization scheme offers many advantages over port knocking, include being
  non-replayable, much more data can be communicated, and the scheme cannot be
  broken by simply connecting to extraneous ports on the server in an effort to
  break knock sequences.  The authorization packets can easily be spoofed as
  well, and this makes it possible to make it appear as though, say,
  www.yahoo.com is trying to authenticate to a target system but in reality the
  actual connection will come from a seemingly unrelated IP. Although the
  default data collection method is to use libpcap to sniff packets off the
  wire, fwknop can also read packets out of a file that is written by the
  iptables ulogd pcap writer or by a separate sniffer process.


pkgId: d4059e318d743aedd22fff627308906ef7294b0827b58c065b961e3f51e25051
name: fwknop-debuginfo
arch: x86_64
version: 2.6.10
epoch: 0
release: 3.el7
summary: Debug information for package fwknop
url: http://www.cipherdyne.org/fwknop/
rpm_license: GPLv2
rpm_group: Development/Debug
rpm_buildhost: e741945368514b8285a9c293c1895c90
rpm_sourcerpm: fwknop-2.6.10-3.el7.src.rpm
location_href: 01362491-fwknop/fwknop-debuginfo-2.6.10-3.el7.x86_64.rpm
checksum_type: sha256
description:
  This package provides debug information for package fwknop.
  Debug information is useful when developing applications that use this
  package or when debugging this package.


pkgId: 4e2eddbc57b7e032d73675a13d581fdde6cea262c3a6cfecd4bbe6cd76caedc0
name: fwknop-devel
arch: x86_64
version: 2.6.10
epoch: 0
release: 3.el7
summary: The fwknop library, header and API docs
url: http://www.cipherdyne.org/fwknop/
rpm_license: GPLv2
rpm_group: Unspecified
rpm_buildhost: e741945368514b8285a9c293c1895c90
rpm_sourcerpm: fwknop-2.6.10-3.el7.src.rpm
location_href: 01362491-fwknop/fwknop-devel-2.6.10-3.el7.x86_64.rpm
checksum_type: sha256
description:
  The Firewall Knock Operator library, libfko, provides the Single Packet
  Authorization implementation and API for the other fwknop components.


