iptables port knock detector - knock is a spa (single packet authorization) and the detector is an iptables module