1 |
Hi Andrew, |
2 |
|
3 |
Thank you for the tip about TARPIT, the problem is now solved. |
4 |
|
5 |
To complete the fix I downloaded patch-o-matic-ng and the iptables |
6 |
source from netfilter.org: |
7 |
|
8 |
cd /usr/src |
9 |
svn co https://svn.netfilter.org/netfilter/trunk/patch-o-matic-ng |
10 |
svn co https://svn.netfilter.org/netfilter/trunk/iptables |
11 |
|
12 |
The documentation on using cvs on netfilter.org is outdated, they've |
13 |
converted to subversion and cvs is no longer available there. |
14 |
|
15 |
cd /usr/src/patch-o-matic-ng |
16 |
./runme extra |
17 |
|
18 |
Allowed me to select the new iptables targets I wanted. |
19 |
|
20 |
cd /usr/src/linux |
21 |
make menuconfig && make && make modules_install && make install |
22 |
|
23 |
I added the "extensions" USE flag to my /etc/make.conf, then reran the |
24 |
iptables emerge. |
25 |
|
26 |
It's all working fine now. |
27 |
|
28 |
Thanks to both you and Bryce for the help you gave! |
29 |
|
30 |
Cheers, Dave |
31 |
|
32 |
Andrew Frink wrote on 02/23/06 15:23: |
33 |
> Dave |
34 |
> to get tarpit support add the "extensions" USE flag when you emerge iptables |
35 |
> cynyr |
36 |
|
37 |
> I was reading about the TARPIT target in the man iptables documentation, |
38 |
> and thought I'd like to give it a try. Unfortunately though, it seems |
39 |
> not to be supported in the 2.6.15-1 Gentoo kernel. |
40 |
|
41 |
> Has anyone used the TARPIT target, or know of a way to get it into the |
42 |
> current kernel? Any experience with this target or 'gotchas' about it? |
43 |
-- |
44 |
gentoo-user@g.o mailing list |