netfilter is missing all the sext extentions on Debian

netfilter is missing all the sext extentions on Debian

[Nick Drage]

Hi,

I run Debian and unfortunately that means my IPTables rulesets are
missing all the interesting extensions such as TARPIT that I would like
to play with.

Does anyone here using the latest IPTables version rather than the
latest Debian package?  If so, how do you integrate it into Debian and
how do you get on?

-- 
If at first you don't succeed, destroy all the evidence that you tried.

Re: netfilter is missing all the sext extentions on Debian

[Jan Engelhardt]

>Hi,
>
>I run Debian and unfortunately that means my IPTables rulesets are
>missing all the interesting extensions such as TARPIT that I would like
>to play with.
>
>Does anyone here using the latest IPTables version rather than the
>latest Debian package?  If so, how do you integrate it into Debian and
>how do you get on?

I am using a self-baked mocked-up iptables, i.e. I took the suse src.rpm, and 
added some POMng patches in. The same goes for the kernel.

That makes 1.3.1-andMyNumber + 2.6.11-myNumber (2.6.11-AS16)



Jan Engelhardt                                                               
--                                                                            
| Gesellschaft fuer Wissenschaftliche Datenverarbeitung Goettingen,
| Am Fassberg, 37077 Goettingen, www.gwdg.de

Re: netfilter is missing all the sext extentions on Debian

[Jörg Harmuth]

Hi Nick,

Nick Drage schrieb:
> Hi,
> 
> I run Debian and unfortunately that means my IPTables rulesets are
> missing all the interesting extensions such as TARPIT that I would like
> to play with.
> 
> Does anyone here using the latest IPTables version rather than the
> latest Debian package?  If so, how do you integrate it into Debian and
> how do you get on?

I use iptables 1.3.1 with Debian woody / sarge - something in the middle
of both (didn't fully upgrade yet, but soon to come) with Kernel 2.4.31.
It's quite simple. Just downloaded the iptables source from
netfilter.org and the newest pom. Than you can patch the kernel and
compile... It turned out, that not all patches I wanted, could be
installed (don't know why, no time to investigate) :( But ok, _I_ can
live with that.

Then just compile iptables and install. This will install iptables* in
/usr/local/sbin instead od the default Debian /sbin, or wherever you you
configured to install. So, if you want to use your version one
possibility is to ensure, that ${PATH} has something like this:

...:/usr/local/sbin:/sbin:...

instead of:

...:/sbin:/usr/local/sbin:...

This way you always have a fallback in case something went wrong.

HTH and have a nice time,

Joerg