fwknop, "FireWall KNock OPerator", implements Single Packet Authorization (SPA).