Stealth Kernel Patch
Platforms:
Linux
Categories:
Linux,
System Security Management
Version: v2.2.20
URL: http://coder.home.cosmic-cow.net/fm/stealth-2.2.20.diff
Stealth IP Stack is a kernel patch for Linux 2.2.18 which makes your machine almost invisable on the network without impeding normal network operation. Many denial of service attacks, such as stream, are much less effective with this patch installed, and port scanners slow to a crawl. It works by restricting TCP RST packets (no "Connection Refused"), restricting ICMP_UNREACH on UDP (Prevents UDP portscans), and restricting all ICMP and IGMP requests. A sysctl interface is used so these features can be turned on and off on the fly.
