Blogs / Personal blogs

David Leadbeater

dgl.cx

Port knocking is mostly a bad idea. But people keep wanting to do it, for some false sense of security. If you don't consider it a security control but a way to keep garbage out of your logs, it might be valid. Here's one way to do it with OpenBSD's pf. More..

Popular posts
6
Total points
1,494
HN comments
700
Rank
#1,246 personal

Visit dgl.cx → On Hacker News Oct 2023 – Aug 2026

Security & Privacy 4Tools & Productivity 2Software Engineering 2Web & Frontend 1Systems & Performance 1Networking & Internet 1

5

Images over DNS

Some places say 255 bytes. They are wrong . Within a TXT record there are multiple character-strings (RFC 1035 section 3.3.14 ) and those are limited in length (because a single byte is used for their length), however there can be many of them.