{"id":21806866,"url":"https://github.com/roguh/ansible-fwknop","last_synced_at":"2026-04-20T19:04:04.748Z","repository":{"id":89927785,"uuid":"122000275","full_name":"roguh/ansible-fwknop","owner":"roguh","description":"Ansible role that secures ports on your server from unauthorized access using fwknop, an improved port knocking utility.","archived":false,"fork":false,"pushed_at":"2018-03-06T22:26:08.000Z","size":19,"stargazers_count":1,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"master","last_synced_at":"2026-04-07T06:36:27.433Z","etag":null,"topics":["ansible","devops","fwknop","knocking","networking","port","security","yaml"],"latest_commit_sha":null,"homepage":"","language":"Ruby","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/roguh.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2018-02-18T23:26:02.000Z","updated_at":"2026-02-05T09:49:59.000Z","dependencies_parsed_at":"2023-05-30T13:30:23.352Z","dependency_job_id":null,"html_url":"https://github.com/roguh/ansible-fwknop","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/roguh/ansible-fwknop","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/roguh%2Fansible-fwknop","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/roguh%2Fansible-fwknop/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/roguh%2Fansible-fwknop/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/roguh%2Fansible-fwknop/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/roguh","download_url":"https://codeload.github.com/roguh/ansible-fwknop/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/roguh%2Fansible-fwknop/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":32061251,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-20T11:35:06.609Z","status":"ssl_error","status_checked_at":"2026-04-20T11:34:48.899Z","response_time":94,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["ansible","devops","fwknop","knocking","networking","port","security","yaml"],"created_at":"2024-11-27T12:31:03.747Z","updated_at":"2026-04-20T19:04:04.719Z","avatar_url":"https://github.com/roguh.png","language":"Ruby","funding_links":[],"categories":[],"sub_categories":[],"readme":"fwknop\n=========\n\nSecure ports on your server from unauthorized access using fwknop, an improved port knocking utility.\n\n\u003e The main application of [fwknop] is to conceal services such as SSH with an additional layer of security in order to make the exploitation of vulnerabilities (both 0-day and unpatched code) much more difficult. In addition, services that are concealed in this fashion naturally cannot be scanned for with Nmap or Shodan. \n\nRequirements\n------------\n\nMake sure your firewall blocks access to any ports\nyou wish to hide. See `iptables-example` for sample iptables commands.\n\nYou need an fwknop client to reveal hidden ports and to setup the\nfwknop key.\nInstall the `fwknop` package on Debian and Ubuntu,\nor use one of the GUI clients\n\n- [fwknop2 (Android app)](http://incomsystems.biz/linux/fwknop2/)\n- [fwknop-gui](https://incomsystems.biz/fwknop-gui/),\n- [jfwknop](https://github.com/fjoncourt/jfwknop).\n\n\nRole Variables\n--------------\n\n| Variable | Description |\n|--------------------|------------------------------------------------|\n| `fwknop_pcap_intf` | Network interface fwknop listens to. Default `eth0`. |\n| `fwknop_access_stanzas` | A list of access stanzas. Default: see `default_access_stanza` |\n\n| Access Stanza Variable | Description\n|------------------------|------------------------------------------------|\n| `source` | Comma separated list of IP addresses or networks from which SPA packets are accepted, or `ANY`. Default `ANY`.\n| `open_ports` | Comma separated list of protocol/port pairs to open. Default `tcp/22`.\n| `key` | Symmetric key.\n| `hmac_key` | Symmetric HMAC key.\n| `key_base64` | Symmetric key encoded in base64.\n| `hmac_key_base64` | Symmetric HMAC key encoded in base64.\n| `fw_access_timeout` | Length of time access to `open_ports` in seconds. Default: `10`.\n| `encryption_mode` | Set this to `legacy` if the fwknop server version is less than 2.5.\n| `restrict_ports` | Ports that should NOT be allowed regardless of the validity of the incoming SPA packet.\n| `destination` | Default: `ANY`.\n\nMake sure to define at least `source` and `key` or `key_base64`.\n\nExample Playbook\n----------------\n\n```\n    - hosts: servers\n      roles:\n         - role: roguh.fwknop\n           fwknop_main_key_base64: YOUR_FWKNOP_KEY\n           fwknop_main_hmac_key_base64: YOUR_FWKNOP_HMAC_KEY\n```       \n\nLicense\n-------\n\nMIT\n\nMore Information\n------------------\n\n[Read about fwknop at cipherdyne.org/fwknop](http://www.cipherdyne.org/fwknop/docs/).\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Froguh%2Fansible-fwknop","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Froguh%2Fansible-fwknop","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Froguh%2Fansible-fwknop/lists"}