Automic VaultAutomic Vault

brew

Installer fwknop avec Homebrew, apk, dnf, MacPorts, Nix, pacman, zypper, apt

Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de fwknop pour les workflows d'agents IA.

Commande d'installationNotes de sécurité

installation

Commandes d'installation supplémentaires

macOS

Homebrewvérifié · 100%
brew install fwknop

local Homebrew formula metadata

MacPortsvérifié · 94%
sudo port install fwknop

MacPorts ports tree · net/fwknop/Portfile · Source: api.github.com

Linux

Alpine Linux apkvérifié · 92%
sudo apk add fwknop

Alpine Linux edge package indexes · fwknop · Source: dl-cdn.alpinelinux.org

Fedora dnfvérifié · 92%
sudo dnf install fwknop

Fedora Rawhide package metadata · fwknop · Source: dl.fedoraproject.org

Nixvérifié · 92%
nix profile install nixpkgs#fwknop

nixpkgs package indexes · pkgs/by-name/fw/fwknop/package.nix · Source: api.github.com

Arch Linux pacmanvérifié · 92%
sudo pacman -S fwknop

Arch Linux sync databases · fwknop · Source: geo.mirror.pkgbuild.com

openSUSE zyppervérifié · 92%
sudo zypper install fwknop

openSUSE Tumbleweed package metadata · fwknop · Source: download.opensuse.org

Debian aptvérifié · 92%
sudo apt install fwknop-apparmor-profile

Debian stable package indexes · fwknop-apparmor-profile · Source: deb.debian.org

aperçu

Résumé du paquet

Single Packet Authorization and Port Knocking

Commandes et alias

  • fwknop
  • fwknopd

historique

Historique du projet et usages

fwknop, the FireWall KNock OPerator, is a security tool for Single Packet Authorization. It conceals services behind a default-drop firewall and temporarily opens access only after a valid encrypted, authenticated, non-replayed packet is observed.

Historique du projet

The official project page says fwknop began in 2004 as a port-knocking implementation and was the first tool to combine traditional encrypted port knocking with passive OS fingerprinting. The project later emphasized Single Packet Authorization as a stronger successor to port knocking.

The current C implementation includes libfko, client and server applications, and support for Linux iptables and firewalld, OpenBSD PF, FreeBSD and macOS ipfw, and custom scripts. The README describes the project state around the 2.5 release in July 2013, when libfko, the client, and fwknopd server formed the core distribution.

The official site continues to publish releases, with the project page listing 2.6.11 as the latest release and the blog showing a 2024 software release post.

Historique d'adoption

fwknop became known in the security community through port-knocking and SPA discussions. The official project page notes two Slashdot appearances in 2004 and 2005, one about combining port knocking with OS fingerprinting and another about going beyond port knocking with single-packet access.

Package metadata shows fwknop in multiple Unix-like package ecosystems, and upstream documentation covers Linux, BSD, macOS, Windows under Cygwin, Android clients, and graphical clients. Its adoption is strongest among administrators who want SSH or internal services invisible to ordinary scans.

Modes d'utilisation

A typical deployment generates encryption and HMAC keys, stores client settings in `~/.fwknoprc`, places shared authorization material in `/etc/fwknop/access.conf`, starts `fwknopd`, and keeps the protected service blocked by default firewall policy until a valid SPA packet arrives.

The tutorial focuses on SSH concealment, NAT gateway use, cloud environments, replay protection, HMAC authenticated encryption, and the operational tradeoff of needing both a client and a daemon.

Pourquoi les passionnés de paquets s'y intéressent

fwknop is significant because it turns firewall access into a packageable client-server protocol with config files, manpages, libraries, distro packages, and alternate clients. It is not just a security script; it is an ecosystem around SPA packets and firewall rule orchestration.

For maintainers, fwknop is also a reminder that security packages often include sensitive config defaults, key files, init or service integration, firewall backend differences, and compatibility with old protocol modes.

Chronologie

  • 2004: Project begins as a port-knocking implementation.
  • 2004: Project receives Slashdot attention for encrypted port knocking with OS fingerprinting.
  • 2005: Single Packet Authorization direction receives further Slashdot attention.
  • 2006: Single Packet Authorization with fwknop paper published in USENIX ;login: Magazine.
  • 2011: GitHub repository created.
  • 2013: README describes the 2.5 release with libfko, client, and server applications.
  • 2016: Comprehensive tutorial updated.
  • 2024: Official site announces fwknop 2.6.11.

Related projects

  • fwknop is closely related to port-knocking tools but positions Single Packet Authorization as a stronger design.
  • The official README names fwknop-gui and Android Fwknop2 as related clients.
  • Other Cipherdyne projects listed near fwknop include psad, fwsnort, gpgdir, and IPTables parsing or chain-management modules.

posture de sécurité

Niveau de risque : vert

narrow executable package without higher-risk signals.

Classificateur de risque

risque vert · confiance faible · appliance

Pourquoi

  • narrow executable package without higher-risk signals

Signaux

  • metadata:no-higher-risk-signals

Comportement d'installation

  • Aucun hook post-install Homebrew n’est enregistré dans les métadonnées de formule.
  • Les métadonnées de bottle Homebrew sont disponibles pour 8 plateformes.
  • S’installe avec 3 dépendances d’exécution.
  • Les métadonnées de compilation listent 1 dépendances de compilation.

Revue recommandée

Avant une utilisation sans surveillance par un agent, vérifiez si l'outil lit des identifiants en clair, écrit un état distant, publie des artefacts ou lance des plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
~/.fwknoprc/etc/fwknop/fwknopd.conf/etc/fwknop/access.conf

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
~/.fwknoprc/etc/fwknop/access.conf

exécutables

Exécutables installés

CommandeTypeExpositionNote
fwknopcliexécutable global
fwknopdcliexécutable global

fraîcheur

Version et fraîcheur

Ces signaux séparent l'âge de génération de la page, l'activité du gestionnaire de paquets et la comparaison avec les versions amont. Un retard de version n'est signalé que lorsqu'une URL de preuve et des versions comparables sont présentes.

page générée2026-07-25
version du gestionnaire2.6.11
gestionnaire mis à jour2026-06-22
données localesOK
amontnot checked
dernière version détectéenon détecté

https://www.cipherdyne.org/fwknop/

métadonnées d'installation

Métadonnées du paquet

Clé du paquetbrew:fwknop
Version2.6.11
Gestionnaire de paquetsHomebrew
Page du gestionnaire de paquetshttps://formulae.brew.sh/formula/fwknop
Page d'accueilhttps://www.cipherdyne.org/fwknop/
Dépôthttps://github.com/mrash/fwknop
Docs amonthttps://www.cipherdyne.org/fwknop
LicenceGPL-2.0-or-later
Archive sourcehttps://www.cipherdyne.org/fwknop/download/fwknop-2.6.11.tar.gz
Dernière mise à jour2026-06-22T14:03:23-07:00
Pulseupdated
Dépendancesgpgme, libassuan, libgpg-error
Dépendances de compilationtexinfo
Bibliothèques fournies par macOSlibpcap
Bouteilledisponible (sur arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, sonoma, ventura, x86_64_linux)
post-install Homebrewnon défini
Serviceaucun déclaré

faits du registre

Détails de la base source

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namefwknop
Version Scheme0
Revision1
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

correspondances dans les bases sources

Autres enregistrements de gestionnaires de paquets

Les correspondances proviennent d’index externes de gestionnaires de paquets et restent séparées des liens de paquets Automic Vault locaux.

Debian apt95%

fwknop-apparmor-profile 2.6.11-2

FireWall KNock OPerator - Apparmor profile

https://www.cipherdyne.com/fwknop/

sudo apt install fwknop-apparmor-profile
  • Section: admin
  • Architecture: all
  • Source Package: fwknop
  • 2 Dépendances
  • normalized package name match
  • Correspondance par : Fwknop
Debian stable package indexes · deb.debian.org · Debian stable package indexes: fwknop-apparmor-profile from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

fwknop-client 2.6.11-2+b1

FireWall KNock OPerator client side - C version

https://www.cipherdyne.com/fwknop/

sudo apt install fwknop-client
  • Section: admin
  • Architecture: amd64
  • Source Package: fwknop
  • 2 Dépendances
  • normalized package name match
  • Correspondance par : Fwknop
Debian stable package indexes · deb.debian.org · Debian stable package indexes: fwknop-client from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

fwknop-server 2.6.11-2+b1

FireWall KNock OPerator server side - C version

https://www.cipherdyne.com/fwknop/

sudo apt install fwknop-server
  • Section: admin
  • Architecture: amd64
  • Source Package: fwknop
  • 5 Dépendances
  • 1 dépendances optionnelles
  • normalized package name match
  • Correspondance par : Fwknop
Debian stable package indexes · deb.debian.org · Debian stable package indexes: fwknop-server from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libfko-doc 2.6.11-2

FireWall KNock OPerator - documentation

https://www.cipherdyne.com/fwknop/

sudo apt install libfko-doc
  • Section: doc
  • Architecture: all
  • Source Package: fwknop
  • normalized package name match
  • Correspondance par : Fwknop
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libfko-doc from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libfko-perl 2.6.11-2+b1

FireWall KNock OPerator - Perl module

https://www.cipherdyne.com/fwknop/

sudo apt install libfko-perl
  • Section: perl
  • Architecture: amd64
  • Source Package: fwknop
  • 4 Dépendances
  • normalized package name match
  • Correspondance par : Fwknop
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libfko-perl from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libfko3-dev 2.6.11-2+b1

FireWall KNock OPerator - development library

https://www.cipherdyne.com/fwknop/

sudo apt install libfko3-dev
  • Section: libdevel
  • Architecture: amd64
  • Source Package: fwknop
  • 1 Dépendances
  • 1 dépendances optionnelles
  • normalized package name match
  • Correspondance par : Fwknop
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libfko3-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libfko3t64 2.6.11-2+b1

FireWall KNock OPerator - shared library

https://www.cipherdyne.com/fwknop/

sudo apt install libfko3t64
  • Section: libs
  • Architecture: amd64
  • Source Package: fwknop
  • 2 Dépendances
  • 1 fournit
  • normalized package name match
  • Correspondance par : Fwknop
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libfko3t64 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

fwknop

nix profile install nixpkgs#fwknop
  • normalized package name match
  • Correspondance par : Fwknop
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/fw/fwknop/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
Ubuntu apt95%

fwknop-apparmor-profile 2.6.10-20.2build3

FireWall KNock OPerator - Apparmor profile

https://www.cipherdyne.com/fwknop/

sudo apt install fwknop-apparmor-profile
  • Section: universe/admin
  • Architecture: all
  • Source Package: fwknop
  • 2 Dépendances
  • normalized package name match
  • Correspondance par : Fwknop
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: fwknop-apparmor-profile from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

fwknop-client 2.6.10-20.2build3

FireWall KNock OPerator client side - C version

https://www.cipherdyne.com/fwknop/

sudo apt install fwknop-client
  • Section: universe/admin
  • Architecture: amd64
  • Source Package: fwknop
  • 2 Dépendances
  • normalized package name match
  • Correspondance par : Fwknop
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: fwknop-client from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

fwknop-server 2.6.10-20.2build3

FireWall KNock OPerator server side - C version

https://www.cipherdyne.com/fwknop/

sudo apt install fwknop-server
  • Section: universe/admin
  • Architecture: amd64
  • Source Package: fwknop
  • 5 Dépendances
  • 1 dépendances optionnelles
  • normalized package name match
  • Correspondance par : Fwknop
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: fwknop-server from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

libfko-doc 2.6.10-20.2build3

FireWall KNock OPerator - documentation

https://www.cipherdyne.com/fwknop/

sudo apt install libfko-doc
  • Section: universe/doc
  • Architecture: all
  • Source Package: fwknop
  • normalized package name match
  • Correspondance par : Fwknop
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libfko-doc from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

libfko-perl 2.6.10-20.2build3

FireWall KNock OPerator - Perl module

https://www.cipherdyne.com/fwknop/

sudo apt install libfko-perl
  • Section: universe/perl
  • Architecture: amd64
  • Source Package: fwknop
  • 4 Dépendances
  • normalized package name match
  • Correspondance par : Fwknop
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libfko-perl from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

libfko3-dev 2.6.10-20.2build3

FireWall KNock OPerator - development library

https://www.cipherdyne.com/fwknop/

sudo apt install libfko3-dev
  • Section: universe/libdevel
  • Architecture: amd64
  • Source Package: fwknop
  • 1 Dépendances
  • 1 dépendances optionnelles
  • normalized package name match
  • Correspondance par : Fwknop
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libfko3-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

libfko3t64 2.6.10-20.2build3

FireWall KNock OPerator - shared library

https://www.cipherdyne.com/fwknop/

sudo apt install libfko3t64
  • Section: universe/libs
  • Architecture: amd64
  • Source Package: fwknop
  • 2 Dépendances
  • 1 fournit
  • normalized package name match
  • Correspondance par : Fwknop
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libfko3t64 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
apk95%

fwknop 2.6.11-r2

Single Packet Authorization (SPA) implementation

https://cipherdyne.org/fwknop/

sudo apk add fwknop
  • License: GPL-2.0-or-later
  • Architecture: x86_64
  • Source Package: fwknop
  • 1 Dépendances
  • 1 fournit
  • normalized package name match
  • Correspondance par : Fwknop
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: fwknop from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

graphe de paquets

Les liens viennent du graphe local de relations entre paquets, des suppléments, des dépendances, des correspondances d'écosystèmes et de l'appartenance aux hubs.

Outils liés

  • gpgmeRuntime dependency declared by Homebrew.
  • libassuanRuntime dependency declared by Homebrew.
  • libgpg-errorRuntime dependency declared by Homebrew.
  • texinfoBuild dependency declared by Homebrew.

Même workflow

  • knockShares av.db curated category or tags: access-control, cli, firewall, port-knocking, security.
  • authz0Shares av.db curated category or tags: access-control, cli, security.
  • fail2banShares av.db curated category or tags: cli, firewall, security.
  • killswitchShares av.db curated category or tags: cli, firewall, security.
  • libselinuxShares av.db curated category or tags: access-control, cli, security.
  • openfgaShares av.db curated category or tags: access-control, cli, security.

piste source

Généré depuis les données du dépôt

Cette page est servie par av-web depuis l'artéfact SQLite privé des paquets généré par scripts/generate-pkg-sqlite.py.

Sources utilisées

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment