# /etc/knockd.conf
[VNC]

	sequence	=	6000,7000,8000
	seq_timeout	=	5
	start_command	=	ufw allow from %IP% to any port 5900
	tcpflags	=	syn
	cmd_timeout	=	10
	stop_command	=	ufw delete allow from %IP% to any port 5900