Next: , Previous: Digests, Up: SPA Parameter Types


2.3.2 SPA Messages

The fwknop system (and subsequently libfko), support a specific set of message types. The message type value is used by fwknop to help determine the correct message format and content. These message types are:

— Variable: int fko_message_type_t
FKO_COMMAND_MSG
A request to have the fwknop server execute the given command. The format for this type is: ‘<ip of requestor>,<command text>’.
               "192.168.1.2,uname -a"

FKO_ACCESS_MSG
A basic access request. This is the most common type in use. The format for this type is: ‘<ip of requestor>,<protocol>/<port>’. Note that mulitple protocol/port entries are allowed.
               "192.168.1.2,tcp/22"
               "192.168.1.2,tcp/22,udp/5005"

FKO_NAT_ACCESS_MSG
An access request that also provide information for the fwknop server to create a Network Address Translation (NAT to an internal address. The format for this string is: ‘<internal ip>,<ext nat port>’.
               "10.10.1.2,9922"

FKO_CLIENT_TIMEOUT_ACCESS_MSG
This is an FKO_ACCESS_REQUEST with a timeout parameter for the fwknop server. The timeout value is provided via the client_timeout data field.
FKO_CLIENT_TIMEOUT_NAT_ACCESS_MSG
This is an FKO_NAT_ACCESS_REQUEST with a timeout parameter for the fwknop server. The timeout value is provided via the client_timeout data field.
FKO_LOCAL_NAT_ACCESS_MSG
This is similar to the FKO_NAT_ACCESS request exept the NAT is to the local to the server (i.e. a service listening on 127.0.0.1).
FKO_CLIENT_TIMEOUT_LOCAL_NAT_ACCESS_MSG
This is an FKO_LOCAL_NAT_ACCESS_REQUEST with a timeout parameter for the fwknop server. The timeout value is provided via the client_timeout data field.