---
name: "knoptm"
section: "8"
platform: "linux"
package: "fwknop-server"
version: "1.9.12-2"
release: "Debian 6.0 (Squeeze)"
platforms: ["linux"]
url: "https://new.carta.tech/knoptm"
---

# knoptm(8)

Daemon in charge to remove firewall rules.

## NAME

**knoptm** - Daemon in charge to remove firewall rules.

## DESCRIPTION

**knoptm** is a daemon that removes rule entries from the iptables or ipfw policies to which fwknop has added access rules for legitimate fwknop PK/SPA clients.  This daemon runs in all authentication modes supported by fwknopd (both port knocking and SPA), and enforces rule timeouts that defined by the */etc/fwknop/access.conf* file.

## OPTIONS

- **-c**, **--config \<config-file\>**

  When run as a daemon **knoptm** references the file **/etc/fwknop/fwknop.conf** for various run-time configuration variables. The path to this file can be changed through the use of the **--config** command line option.

- **-i**, **--interface**

  Specify the interface that **fwknopd** sniffs to acquire packet data.  This is used for running interface checks, such as checking whether the interface has been deleted and recreated (e.g. ppp restart for a VPN connection). The **fwknopd** daemon passes this argument on the **knoptm** command line.

- **--Debug-to-file \<file\>**

  Allow the user to collect outputs from the knoptm daemon by writing debug information to a specific file.

- **--firewall-type \<firewall\>**

  Manually specify the firewall type from the command line.

- **-h**, **--help**

  Display usage information and exit.

- **-V**, **--Version**

  Display version information and exit.

- **--Lib-dir \<directory\>**

  Path to the perl modules directory (not usually necessary).

- **-l**, **--locale \<locale\>**

  Provide a locale setting other than the default "C" locale.

- **--no-locale**

  Do not set the locale at all so that the default system locale will apply.

- **--no-logs**

  Do not generate any log output or emails (fwknop\_test.pl uses this).

- **--no-voluntary-exits**

  Disregard ENABLE\_VOLUNTARY\_EXITS setting. This way fwknopd/knoptm is not allowed to be restarted periodically according to EXIT\_INTERVAL.

- **-O**, **--Override-config \<file\>**

  Override config variable values that are normally read from the /etc/fwknop/fwknop.conf file with values from the specified file. Multiple override config files can be given as a comma separated list.

## DIAGNOSTICS

**knoptm** can be run in debug mode with the --debug command line option. This will disable daemon mode execution, and print verbose information to the screen on STDERR.

## SEE ALSO

[**fwknopd**(8)](/fwknopd/8.md),

## AUTHOR

Michael Rash \<mbr@cipherdyne.org\>

## DISTRIBUTION

**knoptm** is distributed under the GNU General Public License (GPL), and the latest version may be downloaded from **http://www.cipherdyne.org/**