Re: [vserver] Iptables TARPIT / kernel module?

From: Nikolay Kichukov <hijacker_at_oldum.net>
Date: Fri 05 Feb 2010 - 10:25:24 GMT
Message-ID: <4B6BF214.4050509@oldum.net>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jozsef, that sounds interesting. I might give it a try at some point. Thanks for sharing.

Cheers,
- -Nik

Jozsef Kadlecsik wrote:
> On Fri, 5 Feb 2010, Nikolay Kichukov wrote:
>
>> The iptables TARPIT module does not only require patching the iptables
>> source, but also the kernel itself. As it is no longer maintained by the
>> patch-o-matic-ng team, I think the only option you have is to get a
>> vanilla kernel and apply the patches yourself ... and if you want to
>> patch more recent kernel, then you have to even fix the patch code.
>
> The TARPIT target can be found in xtables-addons, which is
> actively maintained (http://xtables-addons.sourceforge.net/).
>
> Best regards,
> Jozsef
> -
> E-mail : kadlec@blackhole.kfki.hu, kadlec@mail.kfki.hu
> PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
> Address : KFKI Research Institute for Particle and Nuclear Physics
> H-1525 Budapest 114, POB. 49, Hungary
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iQEcBAEBAgAGBQJLa/IUAAoJEDFLYVOGGjgXWkUH/A5szq2Yd2lQig74f7TLK4/Q
wkzijs8/lKi9z+pUREsqYtlVZiMiymkxeYMxkvrLinn2DU8OjCabKvoYSL1DJMUS
aWUqvI8gJ/xELD1Bj7755IywhLB0rAe4EIj2CTSuGW1kAokQpVABqkFGvAUjW7ty
AyDBZbz7s3S0GBFcuOk22gw/BhZXQyhdHDmgoUlfeSyusmVcuQDp9u8WKDpYchY1
+yXppDgJI7BFC/n50kYl3LTsyl9wZ8+9ANeDyznJZxyJqVwzChIVLWQiSqBG2ZUn
ZC+T5AOobQxUewDq1qOoaKEbWkGERVlOFgZ5TNUHbhzpn1b79ICDok7qNRkcAo8=
=Swg2
-----END PGP SIGNATURE-----
Received on Fri Feb 5 10:34:55 2010

[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Fri 05 Feb 2010 - 10:34:56 GMT by hypermail 2.1.8