Problems to get TARPIT functionnality with iptables

Problems to get TARPIT functionnality with iptables

[Nicolas Martin]

Hello,

I'm using Debian GNU/Linux and I'd like to get iptables working with
the tarpit function.
I have my 2.6.8 kernel in /usr/src/linux.
I've downloaded patch-o-matic with cvs as told in the netfilter
modification tutorial. It created me /usr/src/linux/netfilter and
/usr/src/linux/netfilter/patch-o-matic (no
/usr/src/linux/netfilter/userspace as told in the tutorial).

After that I launch ./runme ./extra/ipt_TARPIT.patch and if I apply the patch :

Testing patch extra/ipt_TARPIT.patch...
Warning - no help text file could be found in either
/usr/src/linux/net/ipv4/netfilter/Config.help
or /usr/src/linux/Documentation/Configure.help
grep: /usr/src/linux/net/ipv4/netfilter/Config.in: Aucun fichier ou
répertoire de ce type
Could not find place to slot in Config.in line
TEST FAILED: patch NOT applied

If I force with f :

Applying patch extra/ipt_TARPIT.patch...
Warning - no help text file could be found in either
/usr/src/linux/net/ipv4/netfilter/Config.help
or /usr/src/linux/Documentation/Configure.help
grep: /usr/src/linux/net/ipv4/netfilter//Config.in: Aucun fichier ou
répertoire de ce type
Could not find place to slot in Config.in line
grep: /usr/src/linux//dev/null: Aucun fichier ou répertoire de ce type
Could not find place to slot in null entry
Could not find place to slot in Makefile line
Patch extra/ipt_TARPIT.patch applied cleanly.
 
But I can't find the tarpit item when I use make xconfig which should be in 
networking_options -> network packet filtering -> IP:Netfilter configuration 

Thanks for your help because I spent a lot of time trying to figure
this out... I'm quite sure it's something quite silly that I forgot to
do ...

Nicolas

Re: Problems to get TARPIT functionnality with iptables

[Jason Opperisano]

On Thu, Oct 14, 2004 at 10:05:17PM +0200, Nicolas Martin wrote:
> Hello,
> 
> I'm using Debian GNU/Linux and I'd like to get iptables working with
> the tarpit function.
> I have my 2.6.8 kernel in /usr/src/linux.
> I've downloaded patch-o-matic with cvs as told in the netfilter
> modification tutorial. It created me /usr/src/linux/netfilter and
> /usr/src/linux/netfilter/patch-o-matic (no
> /usr/src/linux/netfilter/userspace as told in the tutorial).
> 
> After that I launch ./runme ./extra/ipt_TARPIT.patch and if I apply the patch :

did you "./runme pending" first?

-j

-- 
Jason Opperisano <opie@817west.com>

Re: Problems to get TARPIT functionnality with iptables

[Nicolas Martin]

No I did not use ./runme pending first.
If I launch it, same things happen for all the patches except if I
force it says :
Applying patch submitted/01_2.4.19.patch...
Failed to patch copy of /usr/src/linux

It's really strange ... I thought that maybe the fact that
/usr/src/linux was a link to the real source directory could screw
this up but if I specify /usr/src/kernel-source-2.6.8, it does not
work any better ....


On Thu, 14 Oct 2004 16:10:12 -0400, Jason Opperisano <opie@817west.com> wrote:
> On Thu, Oct 14, 2004 at 10:05:17PM +0200, Nicolas Martin wrote:
> > Hello,
> >
> > I'm using Debian GNU/Linux and I'd like to get iptables working with
> > the tarpit function.
> > I have my 2.6.8 kernel in /usr/src/linux.
> > I've downloaded patch-o-matic with cvs as told in the netfilter
> > modification tutorial. It created me /usr/src/linux/netfilter and
> > /usr/src/linux/netfilter/patch-o-matic (no
> > /usr/src/linux/netfilter/userspace as told in the tutorial).
> >
> > After that I launch ./runme ./extra/ipt_TARPIT.patch and if I apply the patch :
> 
> did you "./runme pending" first?
> 
> -j
> 
> --
> Jason Opperisano <opie@817west.com>
> 
>

Re: Problems to get TARPIT functionnality with iptables

[Jason Opperisano]

On Thu, Oct 14, 2004 at 10:05:17PM +0200, Nicolas Martin wrote:
> Testing patch extra/ipt_TARPIT.patch...
> Warning - no help text file could be found in either
> /usr/src/linux/net/ipv4/netfilter/Config.help
> or /usr/src/linux/Documentation/Configure.help
> grep: /usr/src/linux/net/ipv4/netfilter/Config.in: Aucun fichier ou
        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

upon further review--something's rotten in denmark...  if i'm not
mistaken, "Config.in" is for 2.4, whereas "Kconfig" is the 2.6 name...
so it seems that POM is not aware of the fact that you're running a 2.6
kernel and is trying to patch 2.4 source files...

as to why it's doing that--i have no idea.  what version of POM did you
download?  or did you grab from CVS?

-j

-- 
Jason Opperisano <opie@817west.com>