[ale] Iptables.

[haswes at mindspring.com (Adrin)]

I was just reading  Linux Journal, April 2004. There is a article about Hidden Treasures
of Iptables.

You can download this patch from ftp.netfilter.org in /pub/patch-o-matic. You could then
edit your IPTABLES One of the coolest things I thought was a tar-pit in IPTABLES. It
allows you to set the TCP/IP connection to a zero-byte window then the only way for the
port scanner to back out is to kill the process or wait for a time-out.  Just thought this
was pretty cool.  Has anyone ever tried it or something like it?  I would like to try it,
but my Linux box is no longer the router or in the DMZ.  Maybe I will try it anyways
locally and see what happens.

Adrin