Per Jessen wrote:
Its not in the normal iptables build. TARPIT target is in patch-o-matic (extra section). So you have to download and install it.
1. install patch-o-matic (see README) 2. rebuild your kernel from sources that got patched 3. build iptables
Thanks John - I'll give that a go. It didn't seem obvious that the plain 1.3.6 tarball would not have everything. Guess I need to RTFM.
I think I have retrieved the latest patch-o-matic from ftp.netfilter.org - patch-o-matic-ng-20061006.tar.bz2 - all the later ones are empty. "./runme pending" applies nothing. "./runme base" offers a few new extensions, but nothing I need. So - nothing added nor patched. I've already asked the question on the netfilter list, but just in case you had more suggestions, John? Per Jessen, Zurich -- http://www.spamchek.com/ - managed email security. Starting at SFr5/month/user.