Hi, I''m looking for an example shorewall configuration that sets up a 3 port knock sequence. I''ve searched using Google for any examples or discussions of this kind of setup without success. I apologize if it''s out there and I didn''t find it. Does anyone already have a 2 or 3 port knock configuration to share? I understand that the existing example uses a single ''turn-on'' port surrounded by two ''turn-off'' ports, but I think any decent attacker is going to use a randomizing scan. Not only that, but if I were a patient attacker, I could probe one port and then try port 22 shortly after, then wait a long time before probing another port etc. TIA, -Robert ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/