grsecurity forums

Hi

I have problem with using stealth in Debian Etch with patched Kernel 2.6.24 (form Lenny source).
I'm not sure for what version of IPtables is prepare patch in grescurity main site.

First I patched Lenny iptables (1.4.0 version). But when I type

Code: Select all

iptables -A INPUT -p tcp -m stealth -j REJECT

or

Code: Select all

iptables -A INPUT -p tcp -m stealth -j DROP

there was Segmentation fault

After that I compiled patched iptables from Etch (1.3.6 version). This time I have

Code: Select all

iptables: No chain/target/match by that name

What I can do now?

Check your kernel configuration, is "CONFIG_IP_NF_MATCH_STEALTH" set? And if so, is it "y" or "m"?