[options] logfile = /var/log/knockd.log [openSSH] sequence = 22 seq_timeout = 5 command = /sbin/iptables -A INPUT -s %IP% -p tcp --dport 22 -j ACCEPT tcpflags = syn secret = oogabooga usersecret = boogaooga