[MISSING FILE] TARPIT help file

[MISSING FILE] TARPIT help file

[Stephane Ouellette]

[-- Attachment #1: Type: text/plain, Size: 72 bytes --]

Harald,

   please add this file to P-O-M as it is missing.

Stephane.


[-- Attachment #2: ipt_TARPIT.patch.configure.help --]
[-- Type: text/plain, Size: 719 bytes --]

CONFIG_IP_NF_FILTER
TARPIT target support
CONFIG_IP_NF_TARGET_TARPIT
  Adds a TARPIT target to iptables, which captures and holds
  incoming TCP connections using no local per-connection resources.
  Connections are accepted, but immediately switched to the persist
  state (0 byte window), in which the remote side stops sending data
  and asks to continue every 60-240 seconds.  Attempts to close the
  connection are ignored, forcing the remote side to time out the
  connection in 12-24 minutes.

  This offers similar functionality to LaBrea
  <http://www.hackbusters.net/LaBrea/> but doesn't require dedicated
  hardware or IPs.  Any TCP port that you would normally DROP or REJECT
  can instead become a tarpit.

Re: [MISSING FILE] TARPIT help file

[Harald Welte]

[-- Attachment #1: Type: text/plain, Size: 552 bytes --]

On Wed, Apr 16, 2003 at 09:40:08PM -0400, Stephane Ouellette wrote:
> Harald,
> 
>   please add this file to P-O-M as it is missing.

I've added it to cvs now.
> Stephane.

-- 
- Harald Welte <laforge@netfilter.org>             http://www.netfilter.org/
============================================================================
  "Fragmentation is like classful addressing -- an interesting early
   architectural error that shows how much experimentation was going
   on while IP was being designed."                    -- Paul Vixie

[-- Attachment #2: Type: application/pgp-signature, Size: 232 bytes --]