For other usecases there is an ipfilter target TARPIT, that does a similar thing on the TCP level.