jvinet / knock

A port-knocking daemon
http://www.zeroflux.org/projects/knock
GNU General Public License v2.0
563 stars 115 forks source link

knockd accepts "nonvalid" ports over 65535 #67

Closed dirtbag closed 3 years ago

dirtbag commented 4 years ago

Package: knockd Status: install ok installed Priority: optional Section: net Installed-Size: 89 Maintainer: Ubuntu Developers ubuntu-devel-discuss@lists.ubuntu.com Architecture: amd64 Version: 0.7-1ubuntu1.18.04.2

I was able to configure this in my knockd.conf

sequence = 70000,80000,90000

even though this is completely out of the standard port range (not between 1-65535).. It appears that these values will get "wrapped" and actually become some other port #. i.e. 7000-65535

knockd still works fine, but Im wondering if this is a bug or a feature? ;)

-db