North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: a record?

  • From: Suresh Ramasubramanian
  • Date: Wed Nov 16 10:56:38 2005
  • Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=nqPAq3FXukyk4syvgJgdAcSL4BrgJOOTvfWrYVElHZZ5QwuNH8aKZYZjp1P5kQbCem9FJU+x4SjYrWo71lIsZfLYOiSsKd0noJ5JU8Fcnb/+6SSsqEeRMrYTrqIExjeT23yPPfza27hveUxLppgKoKzWscPy52/82q2WHatlppw=

On 11/16/05, Patrick Lynchehaun <[email protected]> wrote:
>
> In Iptables you can keep port 22 closed until needed, opening it first by
> telneting to a higher port say 5500 and Iptables just giving access to this
> ip. If you want to close it again you can telnet back in on another assigned
> port say 5501, thus closing ssh port to that ip.
>

Yup. AKA "port knocking" which I think someone did mention upthread