Subject: Re: [vserver] Iptables TARPIT / kernel module?
From: Nikolay Kichukov <hijacker@oldum.net>
Date: Fri, 05 Feb 2010 11:43:22 +0200

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hey Rod,

The iptables TARPIT module does not only require patching the iptables source, but also
the kernel itself. As it is no
longer maintained by the patch-o-matic-ng team, I think the only option you have is
to get a vanilla kernel and apply
the patches yourself ... and if you want to patch more recent kernel, then you have
to even fix the patch code.

I've given up using the very useful otherwise TARPIT iptables module. It's so petty.

here is the link I used to get the patches from:

http://enterprise.bih.harvard.edu/pub/tarpit-updates/


Cheers,
- -Nik



Roderick A. Anderson wrote:
> This will be a two pronged question.
> 
> I use Daniel's excellent repo for my CentOS based systems so my first
> question is how do I get the tarpit module for this distribution.
> 
> 
> The second part is probably going to start a fire-storm so I've held off
> asking before now.
> 
> What would or do the developers use distribution or kernel-wise?
> And do any of you have a LV system that allows CentOS guests to built?
> My main concern is if I need to have yum and all it's requirements
> installed in the host?
> 
> 
> TIA,
> Rod
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iQEcBAEBAgAGBQJLa+g6AAoJEDFLYVOGGjgXpXAH/jLW8tO9VJPY8408oB7xegzH
/Y7WmMOavpOTgu6l8qOFvYyLvH/GR0IOUW+5MzvcdHTJQObzz9mOXnmcJqxZFsla
pLeqkmM/dC3cB5zYWyIZjQeNQZ9KHlwbnCUrecfE83mG1+vx2ZSrgRw/me4gnvwW
tAqnyKnmnrHTcvl2EKstZE/BXSZbqzo6KUUxvrAwZ0NxfMwr8Fro1BJXAzi2PS9b
F2deuM52/YCS+sKIqNFGQEzKKMc5XSdiFbVivpvm/ZYFL4TI8hCtlS+5uBR+BbZ6
bc4fBhLKUIZhl72we7ROWpkWeYND6XCrMPpW119Bqz8WbTKXsNeEyPAnD7uYXt0=
=Tu+L
-----END PGP SIGNATURE-----