[Trinux-news] 2.4.21/netfilter.tgz updated to include TARPIT

[Matthew F. <md...@io...>]

Some of y'all may remember Labrea from worm seasons of the past.

Anyway there is a security focus article on using the linux kernel module called TARPIT 
which is much easier and is now included in the latest netfilter package. Fortunately, it 
was already in iptables so I didn't need to update that, too.

http://www.securityfocus.com/infocus/1723

You'll need to install it with 

insmod /lib/modules/ipt_TARPIT.o

# iptables -A INPUT -p tcp -m tcp --dport 135 -j TARPIT


In about 15 minutes I was able to tarpit as many works, have fun :)


YMMV



-- 
| Matthew Franz                              md...@io... |
|              http://www.io.com/~mdfranz                   |