On July 9, 2004 09:14 am, Pablo Allietti wrote: > a collegue ask this question for me > > when compiling in IPTables stuff, I noticed that there was quite a bit > of stuff that is now missing from the kernel 2.6.6 > Could someone point me to where I can find kernel patches or > replacements for these: > > > String Match > DNAT Target > SNAT Target > TARPIT Target Greetings: DNAT/SNAT are integral to iptables -- there is no particular Kernel Module or selection on the iptables section of kernel menu for them. From what I can see in CVS -- TARPIT is being worked on, and string doesn't look like anyone has started to convert it. TARPIT -> "initial work on 2.6.x merge. needs more work (rtable -> flowi conversion)" string -> "Requires 2.4.x since there is no 2.6.x port yet (see ml archives) " both quotes above are from current CVS .... Alistair.