> On Sep 20, 2014, at 4:12 PM, terrygalant.li...@fastest.cc wrote: > > Hi, >
Hi Terry, > Just getting started with fwknop. > > It's up and running and I'm tweaking config files. > > in fwknopd.conf I can configure > > PCAP_INTF eth0; > > to listen to that interface. > > How do you specify the IP address to listen at? > > My eth0 is configured with a static/29 range from my ISP so it has available > several static IP addresses. > > I only want fwknop to listen & act on knocks at ONE of the specific IP > addresses. > > Did I miss it in the config? Good question. While there isn't a specific config var to express this, you could likely accomplish what you want by either adding an IP alias like eth0:0 tied to the IP where you want fwknopd to sniff and then use PCAP_INTF for this interface. Or you could add a PCAP_FILTER statement like "ip <your preferred ip>". I'll add something in for the next release to support your use case more naturally. Perhaps a new REQUIRE_DST var in access.conf. Thanks, Mike > > Thanks for any help! > > Terry > > ------------------------------------------------------------------------------ > Slashdot TV. Video for Nerds. Stuff that Matters. > http://pubads.g.doubleclick.net/gampad/clk?id=160591471&iu=/4140/ostg.clktrk > _______________________________________________ > Fwknop-discuss mailing list > Fwknop-discuss@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/fwknop-discuss ------------------------------------------------------------------------------ Slashdot TV. Video for Nerds. Stuff that Matters. http://pubads.g.doubleclick.net/gampad/clk?id=160591471&iu=/4140/ostg.clktrk _______________________________________________ Fwknop-discuss mailing list Fwknop-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/fwknop-discuss
