Subject: Re: [vserver] Iptables TARPIT / kernel module?
From: Nikolay Kichukov <hijacker@oldum.net>
Date: Fri, 05 Feb 2010 12:25:24 +0200

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jozsef, that sounds interesting. I might give it a try at some point. Thanks for sharing.

Cheers,
- -Nik

Jozsef Kadlecsik wrote:
> On Fri, 5 Feb 2010, Nikolay Kichukov wrote:
> 
>> The iptables TARPIT module does not only require patching the iptables 
>> source, but also the kernel itself. As it is no longer maintained by the 
>> patch-o-matic-ng team, I think the only option you have is to get a 
>> vanilla kernel and apply the patches yourself ... and if you want to 
>> patch more recent kernel, then you have to even fix the patch code.
> 
> The TARPIT target can be found in xtables-addons, which is 
> actively maintained (http://xtables-addons.sourceforge.net/).
> 
> Best regards,
> Jozsef
> -
> E-mail  : kadlec@blackhole.kfki.hu, kadlec@mail.kfki.hu
> PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
> Address : KFKI Research Institute for Particle and Nuclear Physics
>           H-1525 Budapest 114, POB. 49, Hungary
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iQEcBAEBAgAGBQJLa/IUAAoJEDFLYVOGGjgXWkUH/A5szq2Yd2lQig74f7TLK4/Q
wkzijs8/lKi9z+pUREsqYtlVZiMiymkxeYMxkvrLinn2DU8OjCabKvoYSL1DJMUS
aWUqvI8gJ/xELD1Bj7755IywhLB0rAe4EIj2CTSuGW1kAokQpVABqkFGvAUjW7ty
AyDBZbz7s3S0GBFcuOk22gw/BhZXQyhdHDmgoUlfeSyusmVcuQDp9u8WKDpYchY1
+yXppDgJI7BFC/n50kYl3LTsyl9wZ8+9ANeDyznJZxyJqVwzChIVLWQiSqBG2ZUn
ZC+T5AOobQxUewDq1qOoaKEbWkGERVlOFgZ5TNUHbhzpn1b79ICDok7qNRkcAo8=
=Swg2
-----END PGP SIGNATURE-----