tarpitting?

tarpitting?

[Per Jessen]

I'm using iptables 1.3.6 on a SUSE 10.1 box with 2.6.16 - and I just
cannot get tarpitting to work. 

# iptables -A INPUT -p tcp -m tcp --dport 135  -j TARPIT
iptables: No chain/target/match by that name

Can someone guide me in the right direction, please?  

When I asked this on another mailing list it was suggested I need to
install/run patch-o-matic to get the latest kernel-patches, but when I
tried that nothing got applied. 


Per Jessen, Zurich

Re: tarpitting?

[Rob Sterenborg]

On Mon, October 23, 2006 11:08, Per Jessen wrote:
> I'm using iptables 1.3.6 on a SUSE 10.1 box with 2.6.16 - and I just
> cannot get tarpitting to work.
>
> # iptables -A INPUT -p tcp -m tcp --dport 135  -j TARPIT
> iptables: No chain/target/match by that name
>
>
> Can someone guide me in the right direction, please?
>
>
> When I asked this on another mailing list it was suggested I need to
> install/run patch-o-matic to get the latest kernel-patches, but when I tried
> that nothing got applied.

I don't know exactly what you've tried and if TARPIT is already in kernel
2.6.16, but, if you want to patch your kernel then do it like this:

KERNEL_DIR=/path/to/kernel_src \
IPTABLES_DIR=/path/to/iptables_src \
./runme extra

Next, you have to configure your kernel for the TARPIT extension and
compile/install it.


Grts,
Rob