Package: iptables Version: 1.3.3 # iptables -I INPUT -i eth0 -p tcp --dport 22 -j TARPIT
iptables: No chain/target/match by that name man page suggests the above should work (ditto for iptables website) lsmod shows a ipt_REJECT module, but no such module exists for iptables (should since TARPIT is not a built-in target). However, libipt_TARPIT.so does exist. Appears to be a disconnect between the kernel build (netfilter) and the user space iptables tool, so perhaps this is a kernel package bug? I could find no kernel patch for this. Linux tole 2.6.14-2-686 #1 Sat Nov 26 13:10:11 UTC 2005 i686 GNU/Linux (debian kernel-image package) libc.so.6 -> libc-2.3.5 Ciao, David A. Bandel -- Focus on the dream, not the competition. - Nemesis Air Racing Team motto