Automic VaultAutomic Vault

brew

fwknop mit Homebrew, apk, dnf, MacPorts, Nix, pacman, zypper, apt installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für fwknop in AI-Agent-Workflows.

InstallationsbefehlSicherheitshinweise

Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%
brew install fwknop

local Homebrew formula metadata

MacPortsverifiziert · 94%
sudo port install fwknop

MacPorts ports tree · net/fwknop/Portfile · Quelle: api.github.com

Linux

Alpine Linux apkverifiziert · 92%
sudo apk add fwknop

Alpine Linux edge package indexes · fwknop · Quelle: dl-cdn.alpinelinux.org

Fedora dnfverifiziert · 92%
sudo dnf install fwknop

Fedora Rawhide package metadata · fwknop · Quelle: dl.fedoraproject.org

Nixverifiziert · 92%
nix profile install nixpkgs#fwknop

nixpkgs package indexes · pkgs/by-name/fw/fwknop/package.nix · Quelle: api.github.com

Arch Linux pacmanverifiziert · 92%
sudo pacman -S fwknop

Arch Linux sync databases · fwknop · Quelle: geo.mirror.pkgbuild.com

openSUSE zypperverifiziert · 92%
sudo zypper install fwknop

openSUSE Tumbleweed package metadata · fwknop · Quelle: download.opensuse.org

Debian aptverifiziert · 92%
sudo apt install fwknop-apparmor-profile

Debian stable package indexes · fwknop-apparmor-profile · Quelle: deb.debian.org

Überblick

Paketzusammenfassung

Single Packet Authorization and Port Knocking

Befehle und Aliase

  • fwknop
  • fwknopd

Verlauf

Projektgeschichte und Nutzung

fwknop, the FireWall KNock OPerator, is a security tool for Single Packet Authorization. It conceals services behind a default-drop firewall and temporarily opens access only after a valid encrypted, authenticated, non-replayed packet is observed.

Projektgeschichte

The official project page says fwknop began in 2004 as a port-knocking implementation and was the first tool to combine traditional encrypted port knocking with passive OS fingerprinting. The project later emphasized Single Packet Authorization as a stronger successor to port knocking.

The current C implementation includes libfko, client and server applications, and support for Linux iptables and firewalld, OpenBSD PF, FreeBSD and macOS ipfw, and custom scripts. The README describes the project state around the 2.5 release in July 2013, when libfko, the client, and fwknopd server formed the core distribution.

The official site continues to publish releases, with the project page listing 2.6.11 as the latest release and the blog showing a 2024 software release post.

Adoptionsgeschichte

fwknop became known in the security community through port-knocking and SPA discussions. The official project page notes two Slashdot appearances in 2004 and 2005, one about combining port knocking with OS fingerprinting and another about going beyond port knocking with single-packet access.

Package metadata shows fwknop in multiple Unix-like package ecosystems, and upstream documentation covers Linux, BSD, macOS, Windows under Cygwin, Android clients, and graphical clients. Its adoption is strongest among administrators who want SSH or internal services invisible to ordinary scans.

Wie es verwendet wird

A typical deployment generates encryption and HMAC keys, stores client settings in `~/.fwknoprc`, places shared authorization material in `/etc/fwknop/access.conf`, starts `fwknopd`, and keeps the protected service blocked by default firewall policy until a valid SPA packet arrives.

The tutorial focuses on SSH concealment, NAT gateway use, cloud environments, replay protection, HMAC authenticated encryption, and the operational tradeoff of needing both a client and a daemon.

Warum Paket-Nerds sich dafür interessieren

fwknop is significant because it turns firewall access into a packageable client-server protocol with config files, manpages, libraries, distro packages, and alternate clients. It is not just a security script; it is an ecosystem around SPA packets and firewall rule orchestration.

For maintainers, fwknop is also a reminder that security packages often include sensitive config defaults, key files, init or service integration, firewall backend differences, and compatibility with old protocol modes.

Zeitleiste

  • 2004: Project begins as a port-knocking implementation.
  • 2004: Project receives Slashdot attention for encrypted port knocking with OS fingerprinting.
  • 2005: Single Packet Authorization direction receives further Slashdot attention.
  • 2006: Single Packet Authorization with fwknop paper published in USENIX ;login: Magazine.
  • 2011: GitHub repository created.
  • 2013: README describes the 2.5 release with libfko, client, and server applications.
  • 2016: Comprehensive tutorial updated.
  • 2024: Official site announces fwknop 2.6.11.

Related projects

  • fwknop is closely related to port-knocking tools but positions Single Packet Authorization as a stronger design.
  • The official README names fwknop-gui and Android Fwknop2 as related clients.
  • Other Cipherdyne projects listed near fwknop include psad, fwsnort, gpgdir, and IPTables parsing or chain-management modules.

Sicherheitslage

Risikostufe: grün

narrow executable package without higher-risk signals.

Risikoklassifikator

grün Risiko · niedrig Konfidenz · appliance

Warum

  • narrow executable package without higher-risk signals

Signale

  • metadata:no-higher-risk-signals

Installationsverhalten

  • In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
  • Homebrew-Bottle-Metadaten sind für 8 Plattformziele verfügbar.
  • Installiert mit 3 Laufzeitabhängigkeiten.
  • Build-Metadaten listen 1 Build-Abhängigkeiten.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
~/.fwknoprc/etc/fwknop/fwknopd.conf/etc/fwknop/access.conf

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
~/.fwknoprc/etc/fwknop/access.conf

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
fwknopcliglobales Executable
fwknopdcliglobales Executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-07-25
Manager-Version2.6.11
Manager aktualisiert2026-06-22
lokale DatenOK
Upstreamnot checked
neueste erkannte Versionnicht erkannt

https://www.cipherdyne.org/fwknop/

Installationsmetadaten

Paketmetadaten

Paketschlüsselbrew:fwknop
Version2.6.11
PaketmanagerHomebrew
Paketmanager-Seitehttps://formulae.brew.sh/formula/fwknop
Homepagehttps://www.cipherdyne.org/fwknop/
Repositoryhttps://github.com/mrash/fwknop
Upstream-Dokumentationhttps://www.cipherdyne.org/fwknop
LizenzGPL-2.0-or-later
Quellarchivhttps://www.cipherdyne.org/fwknop/download/fwknop-2.6.11.tar.gz
Zuletzt aktualisiert2026-06-22T14:03:23-07:00
Pulseupdated
Abhängigkeitengpgme, libassuan, libgpg-error
Build-Abhängigkeitentexinfo
Von macOS bereitgestellte Bibliothekenlibpcap
Bottleverfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, sonoma, ventura, x86_64_linux)
Homebrew post-installnicht definiert
Dienstkeiner deklariert

Registry-Fakten

Details aus der Quelldatenbank

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namefwknop
Version Scheme0
Revision1
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

Source-Datenbank-Treffer

Andere Paketmanager-Einträge

Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.

Debian apt95%

fwknop-apparmor-profile 2.6.11-2

FireWall KNock OPerator - Apparmor profile

https://www.cipherdyne.com/fwknop/

sudo apt install fwknop-apparmor-profile
  • Section: admin
  • Architecture: all
  • Source Package: fwknop
  • 2 Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: Fwknop
Debian stable package indexes · deb.debian.org · Debian stable package indexes: fwknop-apparmor-profile from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

fwknop-client 2.6.11-2+b1

FireWall KNock OPerator client side - C version

https://www.cipherdyne.com/fwknop/

sudo apt install fwknop-client
  • Section: admin
  • Architecture: amd64
  • Source Package: fwknop
  • 2 Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: Fwknop
Debian stable package indexes · deb.debian.org · Debian stable package indexes: fwknop-client from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

fwknop-server 2.6.11-2+b1

FireWall KNock OPerator server side - C version

https://www.cipherdyne.com/fwknop/

sudo apt install fwknop-server
  • Section: admin
  • Architecture: amd64
  • Source Package: fwknop
  • 5 Abhängigkeiten
  • 1 optionale Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: Fwknop
Debian stable package indexes · deb.debian.org · Debian stable package indexes: fwknop-server from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libfko-doc 2.6.11-2

FireWall KNock OPerator - documentation

https://www.cipherdyne.com/fwknop/

sudo apt install libfko-doc
  • Section: doc
  • Architecture: all
  • Source Package: fwknop
  • normalized package name match
  • Abgeglichen nach: Fwknop
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libfko-doc from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libfko-perl 2.6.11-2+b1

FireWall KNock OPerator - Perl module

https://www.cipherdyne.com/fwknop/

sudo apt install libfko-perl
  • Section: perl
  • Architecture: amd64
  • Source Package: fwknop
  • 4 Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: Fwknop
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libfko-perl from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libfko3-dev 2.6.11-2+b1

FireWall KNock OPerator - development library

https://www.cipherdyne.com/fwknop/

sudo apt install libfko3-dev
  • Section: libdevel
  • Architecture: amd64
  • Source Package: fwknop
  • 1 Abhängigkeiten
  • 1 optionale Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: Fwknop
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libfko3-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libfko3t64 2.6.11-2+b1

FireWall KNock OPerator - shared library

https://www.cipherdyne.com/fwknop/

sudo apt install libfko3t64
  • Section: libs
  • Architecture: amd64
  • Source Package: fwknop
  • 2 Abhängigkeiten
  • 1 stellt bereit
  • normalized package name match
  • Abgeglichen nach: Fwknop
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libfko3t64 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

fwknop

nix profile install nixpkgs#fwknop
  • normalized package name match
  • Abgeglichen nach: Fwknop
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/fw/fwknop/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
Ubuntu apt95%

fwknop-apparmor-profile 2.6.10-20.2build3

FireWall KNock OPerator - Apparmor profile

https://www.cipherdyne.com/fwknop/

sudo apt install fwknop-apparmor-profile
  • Section: universe/admin
  • Architecture: all
  • Source Package: fwknop
  • 2 Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: Fwknop
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: fwknop-apparmor-profile from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

fwknop-client 2.6.10-20.2build3

FireWall KNock OPerator client side - C version

https://www.cipherdyne.com/fwknop/

sudo apt install fwknop-client
  • Section: universe/admin
  • Architecture: amd64
  • Source Package: fwknop
  • 2 Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: Fwknop
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: fwknop-client from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

fwknop-server 2.6.10-20.2build3

FireWall KNock OPerator server side - C version

https://www.cipherdyne.com/fwknop/

sudo apt install fwknop-server
  • Section: universe/admin
  • Architecture: amd64
  • Source Package: fwknop
  • 5 Abhängigkeiten
  • 1 optionale Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: Fwknop
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: fwknop-server from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

libfko-doc 2.6.10-20.2build3

FireWall KNock OPerator - documentation

https://www.cipherdyne.com/fwknop/

sudo apt install libfko-doc
  • Section: universe/doc
  • Architecture: all
  • Source Package: fwknop
  • normalized package name match
  • Abgeglichen nach: Fwknop
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libfko-doc from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

libfko-perl 2.6.10-20.2build3

FireWall KNock OPerator - Perl module

https://www.cipherdyne.com/fwknop/

sudo apt install libfko-perl
  • Section: universe/perl
  • Architecture: amd64
  • Source Package: fwknop
  • 4 Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: Fwknop
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libfko-perl from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

libfko3-dev 2.6.10-20.2build3

FireWall KNock OPerator - development library

https://www.cipherdyne.com/fwknop/

sudo apt install libfko3-dev
  • Section: universe/libdevel
  • Architecture: amd64
  • Source Package: fwknop
  • 1 Abhängigkeiten
  • 1 optionale Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: Fwknop
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libfko3-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

libfko3t64 2.6.10-20.2build3

FireWall KNock OPerator - shared library

https://www.cipherdyne.com/fwknop/

sudo apt install libfko3t64
  • Section: universe/libs
  • Architecture: amd64
  • Source Package: fwknop
  • 2 Abhängigkeiten
  • 1 stellt bereit
  • normalized package name match
  • Abgeglichen nach: Fwknop
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libfko3t64 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
apk95%

fwknop 2.6.11-r2

Single Packet Authorization (SPA) implementation

https://cipherdyne.org/fwknop/

sudo apk add fwknop
  • License: GPL-2.0-or-later
  • Architecture: x86_64
  • Source Package: fwknop
  • 1 Abhängigkeiten
  • 1 stellt bereit
  • normalized package name match
  • Abgeglichen nach: Fwknop
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: fwknop from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

Paketgraph

Links stammen aus dem lokalen Paketbeziehungsgraph, Ergänzungen, Abhängigkeitskanten, Ecosystem-Matches und Paket-Hub-Mitgliedschaft.

Verwandte Tools

  • gpgmeRuntime dependency declared by Homebrew.
  • libassuanRuntime dependency declared by Homebrew.
  • libgpg-errorRuntime dependency declared by Homebrew.
  • texinfoBuild dependency declared by Homebrew.

Gleicher Workflow

  • knockShares av.db curated category or tags: access-control, cli, firewall, port-knocking, security.
  • authz0Shares av.db curated category or tags: access-control, cli, security.
  • fail2banShares av.db curated category or tags: cli, firewall, security.
  • killswitchShares av.db curated category or tags: cli, firewall, security.
  • libselinuxShares av.db curated category or tags: access-control, cli, security.
  • openfgaShares av.db curated category or tags: access-control, cli, security.

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment