The version of xt_TARPIT which worked in 2.6.23, panics the kernel with 2.6.24. Fix below. Current version of ipt_TARPIT.c in patch-o-matic-ng svn is dated 20070524. I do not know of other places where TARPIT module could be found. diff --git a/net/netfilter/xt_TARPIT.c b/net/netfilter/xt_TARPIT.c index 23574bd..927ff88 100644 --- a/net/netfilter/xt_TARPIT.c +++ b/net/netfilter/xt_TARPIT.c @@ -152,7 +152,7 @@ static inline void tarpit_tcp(struct sk_buff *oskb, unsigned int hook) #endif addr_type = RTN_LOCAL; - if (ip_route_me_harder(&nskb, addr_type)) + if (ip_route_me_harder(nskb, addr_type)) goto free_nskb; /* Adjust IP TTL */ @@ -176,14 +176,13 @@ static inline void tarpit_tcp(struct sk_buff *oskb, unsigned int hook) kfree_skb(nskb); } -static unsigned int xt_tarpit_target(struct sk_buff **pskb, +static unsigned int xt_tarpit_target(struct sk_buff *skb, const struct net_device *in, const struct net_device *out, unsigned int hooknum, const struct xt_target *target, const void *targinfo) { - struct sk_buff *skb = *pskb; const struct iphdr *iph = ip_hdr(skb); struct rtable *rt = (void *)skb->dst; -- Do what you love because life is too short for anything else. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html