From: Stephane Ouellette <ouellettes@videotron.ca>
To: netfilter-devel@lists.netfilter.org, Harald Welte <laforge@gnumonks.org>
Subject: [MISSING FILE] TARPIT help file
Date: Wed, 16 Apr 2003 21:40:08 -0400 [thread overview]
Message-ID: <3E9E05F8.806@videotron.ca> (raw)
[-- Attachment #1: Type: text/plain, Size: 72 bytes --]
Harald,
please add this file to P-O-M as it is missing.
Stephane.
[-- Attachment #2: ipt_TARPIT.patch.configure.help --]
[-- Type: text/plain, Size: 719 bytes --]
CONFIG_IP_NF_FILTER
TARPIT target support
CONFIG_IP_NF_TARGET_TARPIT
Adds a TARPIT target to iptables, which captures and holds
incoming TCP connections using no local per-connection resources.
Connections are accepted, but immediately switched to the persist
state (0 byte window), in which the remote side stops sending data
and asks to continue every 60-240 seconds. Attempts to close the
connection are ignored, forcing the remote side to time out the
connection in 12-24 minutes.
This offers similar functionality to LaBrea
<http://www.hackbusters.net/LaBrea/> but doesn't require dedicated
hardware or IPs. Any TCP port that you would normally DROP or REJECT
can instead become a tarpit.
next reply other threads:[~2003-04-17 1:40 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-04-17 1:40 Stephane Ouellette [this message]
2003-04-17 12:39 ` [MISSING FILE] TARPIT help file Harald Welte
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=3E9E05F8.806@videotron.ca \
--to=ouellettes@videotron.ca \
--cc=laforge@gnumonks.org \
--cc=netfilter-devel@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.