2 of 3 for patch-o-matic-ng

diff -r -u --new-file patch-o-matic-ng/psdp/help patch-o-matic-ng.psdp.fuzzyp/psdp/help
@@ -0,0 +1,12 @@
+This filter extends the original PSD filter. It will keep track
+of connections from a single source IP address and assign weighting
+based on the destination port (for TCP/UDP) or ICMP type.
+
+Examples:
+
+# This will match all packets from a single IP source address that exceed the weight
+# threshold of 16. The memory for this IP address is  released after 20 seconds
+# of inactivity. The filter information for active IP addresses can be seen in
+# /proc/net/mypsdp.
+#
+iptables -A FORWARD -m psdp --psdp-name mypsdp --psdp-weight-threshold 16 --psdp-delay-threshold 20000 --psdp-lo-ports-weight 1 --psdp-hi-ports-weight 3 -j DROP

diff -r -u --new-file patch-o-matic-ng/psdp/info patch-o-matic-ng.psdp.fuzzyp/psdp/info
@@ -0,0 +1,6 @@
+Author: Tim Gardner <[email protected]>
+Status: Stable
+Repository: extra
+Depends: hash
+Recompile: netfilter
+Recompile: iptables

diff -r -u --new-file patch-o-matic-ng/psdp/iptables/extensions/libipt_psdp.man patch-o-matic-ng.psdp.fuzzyp/psdp/iptables/extensions/libipt_psdp.man
@@ -0,0 +1,2 @@
+This filter is used to detect an excessive number of connections from any
+single IP address. 

diff -r -u --new-file patch-o-matic-ng/psdp/iptables/extensions/.psdp-test patch-o-matic-ng.psdp.fuzzyp/psdp/iptables/extensions/.psdp-test
@@ -0,0 +1,3 @@
+#!/bin/sh
+# True if psdp is applied.
+[ -f $KERNEL_DIR/include/linux/netfilter_ipv4/ipt_psdp.h ] && echo psdp

diff -r -u --new-file patch-o-matic-ng/psdp/linux/net/ipv4/netfilter/Config.in.ladd patch-o-matic-ng.psdp.fuzzyp/psdp/linux/net/ipv4/netfilter/Config.in.ladd
@@ -0,0 +1,2 @@
+  dep_tristate '  MAC address match support' CONFIG_IP_NF_MATCH_MAC $CONFIG_IP_NF_IPTABLES
+  dep_tristate '  PSD Plus filter support.' CONFIG_IP_NF_PSDP $CONFIG_IP_NF_HASH

diff -r -u --new-file patch-o-matic-ng/psdp/linux/net/ipv4/netfilter/Kconfig.ladd patch-o-matic-ng.psdp.fuzzyp/psdp/linux/net/ipv4/netfilter/Kconfig.ladd
@@ -0,0 +1,6 @@
+config IP_NF_PSDP
+	tristate "PSD Plus match filter support"
+	help
+	  Allows Port Scan Detection of multiple destinations from
+	  one source address.
+

diff -r -u --new-file patch-o-matic-ng/psdp/linux/net/ipv4/netfilter/Makefile.ladd patch-o-matic-ng.psdp.fuzzyp/psdp/linux/net/ipv4/netfilter/Makefile.ladd
@@ -0,0 +1,2 @@
+obj-$(CONFIG_IP_NF_NAT) += iptable_nat.o
+obj-$(CONFIG_IP_NF_PSDP) += ipt_psdp.o