The fwknop system (and subsequently libfko), support a specific set of message types. The message type value is used by fwknop to help determine the correct message format and content. These message types are:
FKO_COMMAND_MSG
- A request to have the fwknop server execute the given command. The format for this type is: ‘<ip of requestor>,<command text>’.
"192.168.1.2,uname -a"FKO_ACCESS_MSG
- A basic access request. This is the most common type in use. The format for this type is: ‘<ip of requestor>,<protocol>/<port>’. Note that mulitple protocol/port entries are allowed.
"192.168.1.2,tcp/22" "192.168.1.2,tcp/22,udp/5005"FKO_NAT_ACCESS_MSG
- An access request that also provide information for the fwknop server to create a Network Address Translation (NAT to an internal address. The format for this string is: ‘<internal ip>,<ext nat port>’.
"10.10.1.2,9922"FKO_CLIENT_TIMEOUT_ACCESS_MSG
- This is an FKO_ACCESS_REQUEST with a timeout parameter for the fwknop server. The timeout value is provided via the
client_timeout
data field.FKO_CLIENT_TIMEOUT_NAT_ACCESS_MSG
- This is an FKO_NAT_ACCESS_REQUEST with a timeout parameter for the fwknop server. The timeout value is provided via the
client_timeout
data field.FKO_LOCAL_NAT_ACCESS_MSG
- This is similar to the FKO_NAT_ACCESS request exept the NAT is to the local to the server (i.e. a service listening on 127.0.0.1).
FKO_CLIENT_TIMEOUT_LOCAL_NAT_ACCESS_MSG
- This is an FKO_LOCAL_NAT_ACCESS_REQUEST with a timeout parameter for the fwknop server. The timeout value is provided via the
client_timeout
data field.