Hi all,
I have a request for the next build of sarpi kernel.
In my configuration i need the SYNPROXY target for iptables ( synflood protection when it works ).
In my first installation I rebuilt the kernel to include it ( as module ).
Now I have upgraded to 5.4.21 ( sarpi edition ) and noticed that the option was off.

So my request is: coul it be possible to have this option enabled ( it's the only option of Netfilter that is not enabled ) ?

root@casa# diff config_original .config
946a947
> CONFIG_NETFILTER_SYNPROXY=m
1163c1164
< # CONFIG_IP_NF_TARGET_SYNPROXY is not set
---
> CONFIG_IP_NF_TARGET_SYNPROXY=m

In any case thanks for the incredible work you guys are doing on sarpi !!!

Hi Pigi.

The concept behind SARPi is to encourage and facilitate Slackware ARM users into doing things for themselves, like configuring and building their own kernels and packages [for starters], in order to learn from the great experience they will gain from doing do.

If users really don't want to go to the time and trouble of learning how to do the above there's always the 'rpi-update' alternative. Which will put you back on the 4.19.x kernel where everything worked as expected, I assume.

Yes, I can specify the "CONFIG_IP_NF_TARGET_SYNPROXY=m" in the next build kernel .config so that it's usable for you.

1 members found this post helpful.

Exaga,
I've already recompiled my kernels for my need ( two times today for 230 minutes every run ).

My was only a suggestion as lot of us use Pi as bastion host and being that this flag is really useful for protecting against syn flood, I thought that eventually someone could have been happy

In my need ( and not only on mine ) I also need some settings for cggroups stuss ( for containers ) but I didn't ask as this stuff are a little more specifics.

I'm an old time slackware user ( I think it was slackware-3 kernel 1.2.13 which admit my age ) and I've always seen slackware as a security oriented distro and this was the only setting missing to keep this idea working ( IMHO, btw ).

In any case I will thank you for all the work you are doing to keep this distro working.

Pigi

You're welcome.

I'm building a new SARPi batch as we speak. Should be ready in 10-12 hours because I will be sleeping for approx. 7-8 of them.

New SARPi batch has been built using RPi kernel 5.4.22 source and can be downloaded here: https://sarpi.fatdog.eu/index.php?p=downloads

"CONFIG_IP_NF_TARGET_SYNPROXY=m" was specified in the kernel .config prior to being compiled.