There is a ROUTE target available for iptables in the patch-o-matic extra repository, and it doesn't appear to be part of the hardened-sources patch set (although it is mentioned in the man page). I am running hardened-sources-2.6.16-r11 and iptables-1.3.5-r4. Here's a page with some info (it's currently the first item): http://www.netfilter.org/projects/patch-o-matic/pom-extra.html Reproducible: Always
I'm sorry, but such things *really* need to go UPSTREAM (as in the Linux kernel).