5 Commits

Author	SHA1	Message	Date
Jan Rafaj	2cab32596a	pknock: replace id_port_knocked with accepted_knock_count ... Gives a better sense of the member's use. Signed-off-by: Jan Rafaj <jr+netfilter-devel@cedric.unob.cz>	2009-10-12 00:43:50 +02:00
Jan Rafaj	08f6a82bdc	pknock: avoid fillup of peer table during DDoS ... In TCP --strict mode, forget the peer which sent the wrong knock in a sequence, rather than resetting its status to ST_INIT. This avoids filling up the peer table (which would lead to pknock DoS) in case of a DDoS attack performed by a set of port-scanning malicious hosts.	2009-10-11 01:48:20 +02:00
Jan Engelhardt	82a8524f1a	pknock: add CONNECTOR guards	2009-10-09 18:15:27 +02:00
Jan Engelhardt	6bb354d3f0	pknock: add Kconfig file	2009-10-09 18:11:49 +02:00
Jan Engelhardt	5184176c3b	pknock: move into separate directory ... There will be a number of pknock-related tools, e.g. the trigger programs, so move that out to its own directory.	2009-10-09 17:50:05 +02:00