|
List Info
Thread: Re: ipt_account / iptables 1.3.8
|
|
| Re: ipt_account / iptables 1.3.8 |
 
United States |
2007-06-27 13:30:58 |
Pascal Hambourg wrote:
> [...]
> AFAIK, the concerned extensions are : fuzzy, nth,
random (both
> superseded by statistic), ROUTE, account, BALANCE,
childlevel,
> connlimit, dstlimit, FTOS, IPMARK, ipv4options,
IPV4OPTSSTRIP, mport,
> NETLINK, osf, psd, record_rpc, rpc, TARPIT, TCPLAG,
time, TRACE, u32,
> XOR.
Is there something that functionally replaces TARPIT?
|
|
| Re: ipt_account / iptables 1.3.8 |
 
Germany |
2007-06-27 13:59:08 |
On Jun 27 2007 14:30, David Ford wrote:
>Pascal Hambourg wrote:
>> [...]
>> AFAIK, the concerned extensions are : fuzzy, nth,
random (both
>> superseded by statistic), ROUTE, account, BALANCE,
childlevel,
>> connlimit, dstlimit, FTOS, IPMARK, ipv4options,
IPV4OPTSSTRIP, mport,
>> NETLINK, osf, psd, record_rpc, rpc, TARPIT, TCPLAG,
time, TRACE, u32,
>> XOR.
>
>Is there something that functionally replaces TARPIT?
>
Like, xt_DELUDE?
Jan
--
|
|
| Re: ipt_account / iptables 1.3.8 |
Germany |
2007-06-27 14:03:09 |
On Jun 27 2007 14:30, David Ford wrote:
>Pascal Hambourg wrote:
>> <quote>
>> - Remove extensions for unmaintained/obsolete
patchlets
>> </quote>
>>
>> AFAIK, the concerned extensions are : fuzzy, nth,
random (both
>> superseded by statistic), ROUTE, account, BALANCE,
childlevel,
>> connlimit, dstlimit, FTOS, IPMARK, ipv4options,
IPV4OPTSSTRIP, mport,
>> NETLINK, osf, psd, record_rpc, rpc, TARPIT, TCPLAG,
time, TRACE, u32,
>> XOR.
>
>Is there something that functionally replaces TARPIT?
>
Uhm, please add a reference next time; only by chance I
found the thread origin
at the netfilter list.
No idea why TARPIT got removed. Maybe it's
"unmaintained", but it did not need
a lot of maintenance either. Though, people had to patch
their kernel.
There is no replacement for TARPIT - it's solid. (And
xt_DELUDE does not
replace it; it is something inbetween REJECT and TARPIT.)
Jan
--
|
|
[1-3]
|
|