ahh haven't really played that much with tarpit, thansk for clearing that up :-)<br><br><div><span class="gmail_quote">On 3/8/06, <b class="gmail_sendername">Dave Jones</b> <<a href="mailto:Dave.Jones@xs4all.nl">Dave.Jones@xs4all.nl </a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Hi Andrew,<br><br>Andrew Frink wrote on 03/08/06 14:57:<br>> You could also just add the "extensions" USE flag to iptables and that <br>> should give you tarpit support<br><br>> On 3/7/06, *Dave Jones* < <a href="mailto:Dave.Jones@xs4all.nl">Dave.Jones@xs4all.nl</a><br>> <mailto:<a href="mailto:Dave.Jones@xs4all.nl">Dave.Jones@xs4all.nl </a>>> wrote:<br><br>> Erik Westenbroek wrote on 03/07/06 04:18:<br>> > I am attempting create a tarpit to protect against SSH Brute force<br>> > attempts. I tried this:<br>> --snip-- <br>> > iptables -A SSH_Brute_Force -p tcp -j TARPIT<br>> > After I type the last command typed I got this error message:<br>> > iptables: No chain/target/match by that name<br><br>> The standard Gentoo-sources kernel does not include the TARPIT target. <br>> You need to pick up an updated kernel iptables source from<br>> <a href="http://netfilter.org">netfilter.org</a> <<a href="http://netfilter.org">http://netfilter.org</a>><br><br> --- snip---<br> <br>Simply adding "extensions" to your /etc/make.conf USE is not enough.<br><br>Without the iptables kernel source updates you still won't have the<br>TARPIT target, even though the iptables package will have support for <br>support it in its library routines.<br><br>Cheers, Dave<br>--<br><a href="mailto:gentoo-user@gentoo.org">gentoo-user@gentoo.org</a> mailing list<br><br></blockquote></div><br>