About TARPIT

For the ones who does not know what the TARPIT module is or what it does. Here is some resources. The tarpit module is basically unsupported at this time but some at Harvard have been updating it to work with newer kernels.

The tarpit module is great for adding rules for port scanners and ddos bots. What it does is tarpit the attackers connection slowing it down and making their cpu go through the roof. Here is an article about using tarpitting for ddos protected web hosting.

http://www.secureworks.com/research/threats/ddos/?threat=ddos

Here is the page for the students at harvard who are updating the tarpit module

http://enterprise.bidmc.harvard.edu/pub/tarpit-updates/