cipherdyne.org — Single Packet Authorization (SPA) is basically port knocking on steroids, and fwknop is the best supported and feature-rich implementation available today. I never worry about zero-day vulnerabilities in my SSH daemon while I'm running fwknop. This is the production-ready release of fwknop; use fwknop with iptables in a default-drop stance.