I opened 503193 against iptables because TARPIT was removed, but very sensibly it's now a "WON'TFIX" bug.
The netfilter-extensions(-source) package is effectively unusable at this point with out the user-space libraries for the extra modules.
-- - Norman Rasmussen - Email: norman@rasmussen.co.za - Home page: http://norman.rasmussen.co.za/