search

Sonelli / juicessh-portknocker

A port knocking plugin for JuiceSSH
Apache License 2.0
86 stars 33 forks source link

Only first knock recognised #2

Open lcapriotti opened 10 years ago

lcapriotti commented 10 years ago

Using knockd on server side (both debian wheezy and ubuntu trusty), I set a sequence of knocks like:

sequence = 20xx,30yy,20xx

and while I can have the sequence correctly processed with latest Kitty ssh client, using this plugin only the knocks on the first port are received, ie a port knocking sequence configured as above results in the following on the syslog:

Sep 11 10:01:49 mynas knockd: aa.bb.cc.dd: SSH: Stage 1 Sep 11 10:01:52 mynas knockd: aa.bb.cc.dd: SSH: Stage 1

horstk commented 10 years ago

Same problem here. I think I found the reason for this problem. According to the logfiles of my server every knock will be sent twice.

lcapriotti commented 10 years ago

I managed to have the plugin work flawlessly by using pauses between knocks. In case of high latency connections it is critical to be able to decrease the knock rate, kudos to developers to have this feature right away, I'm now struggling with Kytty that does not have this functionality (yet).

flabbergast commented 9 years ago

I have the same issue - that individual "knocks" are sent twice (so only the first once is recognised as valid, but the second knock on the first port invalidates the sequence). I had to rewrite my iptables based knocking to see double knocks as allowed behaviour. Using pauses between knocks does not help in my situation.

apeyroux commented 9 years ago

I have the same issue

uvjim commented 9 years ago

Same issue here. Only the first knock is seen. Occasionally the second knock will be seen but pauses do not help me either.

Using Debian Jessie and knockd on the server side.

Edit: I can now confirm that I see a double knock as well.

adrianke commented 9 years ago

I did also experience the double knock bug. My workaround: Use UDP packets instead.

fhfa commented 8 years ago

Greetings. I've also experience this issue, pauses did not help either. Only using UDP packets.

jheiselman commented 8 years ago

Switching from TCP packets to UDP packets resolved this issue for me.

OvoiDs commented 8 years ago

Same as well. UDP did the trick !

gioalex commented 7 years ago

Duplicated tcp packet also for me. I've bought juicessh... why no support for this piece of software?? regards Alessandro

jheiselman commented 7 years ago

@gioalex my guess is because while the app makes the devs money, the plugins do not, so they don't support them. Kind of sucks because you expect such a good app to have good support for all of its features.

HelLViS69 commented 7 years ago

Same problem here. TCP packets are sent twice.. using only UDP worked