Search Results

Knocknoc protects services behind Traefik with the Knocknoc Traefik plugin. The plugin is a middleware that reads and enforces a Knocknoc Allowlist (EDL). No Knocknoc Agent is strictly needed. Traefik can poll the EDL from the Knocknoc server itself, or from a...

This guide explains how to move Knocknoc to a new machine. For example, you might be replacing old hardware, or moving to a different data center or cloud provider. If the server's address changes, it also explains how to point your agents, users and identity ...

Agent error code #299007 occurs when a knoc's predefined source is a network, such as 192.168.100.48/29, and the agent serving the knoc is too old to grant one. An older agent would grant only the network's first address while reporting the whole network grant...

Agent error code #299008 means the agent fetching one of your blocked address lists could not download it. The connection to the list's server failed, timed out, or the address could not be used. The addresses from the last successful fetch keep blocking, and ...

Agent error code #299009 means the agent fetching one of your blocked address lists reached the list's server, and the server refused the request. The card shows the status it answered with, for example 403 Forbidden or 404 Not Found. The addresses from the ...

Agent error code #299010 means the blocked address list the agent downloaded is larger than Knocknoc accepts. The agent stops reading at the limit rather than sending part of a list, and the addresses from the last successful fetch keep blocking. A list can be...

Agent error code #MIKRO103 indicates that the knoc's predefined source is an IPv4 address written inside an IPv6 one (for example ::ffff:10.0.0.0) carrying a mask narrower than the embedded IPv4 range. A mask on that form is measured against 128 bits, so ther...

Agent error code #NFT053 occurs when a knoc's predefined source is a network, such as 192.168.100.48/29, and the nftables set the knoc points at was declared without flags interval. A set without flags interval stores single addresses only, and nft refuses...

Agent error code #200250 means the address in the integration belongs to a different kind of device than the integration is set up for. Either it points at a Panorama with Use Panorama off, or at a firewall with Use Panorama on. Knocknoc talks to the two diffe...

Agent error code #200251 means a serial number on the knoc does not match a firewall Panorama manages, or matches one that is not connected to Panorama right now. Through Panorama, Knocknoc sends each change to the managed firewalls named on the knoc. A serial...

Agent error code #200252 means the device group on the knoc does not exist on Panorama, or one of the knoc's managed firewalls is not a member of it. In address group mode through Panorama, Knocknoc writes its address objects into the device group, and Panoram...

Agent error code #200253 means the firewall has no IP external dynamic list with the name configured on the knoc. In Passive+ mode, a grant asks the firewall to refresh the list straight away, so a new address is picked up in seconds rather than at the list's ...

Agent error code #200254 means the firewall has the external dynamic list, but reports that its last attempt to fetch the list failed. Until it succeeds, the firewall keeps using whatever it last fetched, so newly granted users are not admitted. The firewall f...

Agent error code #200255 means the address group on the knoc is a dynamic address group, which matches addresses by tag. In address group mode, Knocknoc adds address objects to a static group's member list, and a dynamic group has no member list to add to. Ste...

Agent error code #200256 is a warning from Validate. The agent looked for a dynamic address group whose match criteria name the knoc's tag, and found none where it looked. A registration on a tag no group matches is accepted by the firewall but admits nobody. ...

Agent error code #200257 is a warning from Validate on a knoc that has not been saved yet. The tag it names already has addresses registered on the firewall. A tag belongs to one knoc. Knocknoc reads back what is registered on the tag and removes any address t...