Re: [gentoo-user] TARPIT iptables target

2006-02-24 Thread darren kirby
quoth the Dave Jones: TARPIT Just a caveat: Keep in mind that if a bad guy figures out you are using TARPIT, the very nature of it (ie: persistant connections) opens your box to a severe DOS vulnerability, especially if said bad guy has a bot-net at his disposal. If you know what you are

Re: [gentoo-user] TARPIT iptables target

2006-02-23 Thread Andrew Frink
Daveto get tarpit support add the extensions USE flag when you emerge iptablescynyrOn 2/22/06, Dave Jones [EMAIL PROTECTED] wrote:Hi,I was reading about the TARPIT target in the man iptables documentation, and thought I'd like to give it a try.Unfortunately though, it seemsnot to be supported in

Re: [gentoo-user] TARPIT iptables target

2006-02-23 Thread Dave Jones
Hi Andrew, Thank you for the tip about TARPIT, the problem is now solved. To complete the fix I downloaded patch-o-matic-ng and the iptables source from netfilter.org: cd /usr/src svn co https://svn.netfilter.org/netfilter/trunk/patch-o-matic-ng svn co

[gentoo-user] TARPIT iptables target

2006-02-22 Thread Dave Jones
Hi, I was reading about the TARPIT target in the man iptables documentation, and thought I'd like to give it a try. Unfortunately though, it seems not to be supported in the 2.6.15-1 Gentoo kernel. Has anyone used the TARPIT target, or know of a way to get it into the current kernel? Any