Changeset 1239
- Timestamp:
- 08/31/08 09:31:33 (3 months ago)
- Files:
-
- fwknop/trunk/fwknop.8 (modified) (4 diffs)
Legend:
- Unmodified
- Added
- Removed
- Modified
- Copied
- Moved
fwknop/trunk/fwknop.8
r1217 r1239 7 7 \- Firewall Knock Operator 8 8 .SH SYNOPSIS 9 .B fwknop \-A <ports> -R|-a|-s \-D <host> [options]9 .B fwknop \-A <ports> \-R|\-a|\-s \-D <host> [options] 10 10 .SH DESCRIPTION 11 11 … … 122 122 does not require this argument. 123 123 .TP 124 .BR -R|-a|-s124 .BR \-R|\-a|\-s 125 125 One of these options (see below) is required to tell the remote 126 126 .B fwknopd 127 127 daemon what IP should be let through the local firewall. It is recommend to use 128 the -R or -a options instead of-s in order to harden SPA communications against128 the \-R or \-a options instead of \-s in order to harden SPA communications against 129 129 possible MITM attacks. 130 130 … … 203 203 .BR \-\^\-URL\ \<web\ resolution\ \URL> 204 204 This option is used in conjunction with the 205 .B -R205 .B \-R 206 206 option so that fwknop will resolve the externally routable IP address (useful 207 207 if fwknop is run on a system being a NAT) via a web service URL supplied on … … 537 537 to derive the client IP address. This is a safer method of acquiring the client IP 538 538 address than using the 539 .B -s539 .B \-s 540 540 option because the source IP is put within the encrypted 541 541 packet instead of having the
