Re: separation of sysctl and tcp-window-tracking patch?

["Brian J. Murrell" <netfilter@interlinx.bc.ca>]

[-- Attachment #1: Type: text/plain, Size: 1109 bytes --]

On Fri, 2002-12-13 at 07:06, Patrick Schaaf wrote:
> > Failing a helper, I'm unable to come up with anything better than
> > adjusting timeouts on a per-port basis...
> 
> What about a single new target, CTTIMEOUT or something, having a single
> parameter, a relative timeout in seconds. Whenever that target hits,
> and we have a connection hanging off our skb, the connection's timeout
> will be refreshed to now+the_given_timeout.

I guess because the idea of a parameter to set the timeout has been
floated before (by me and by others before me) and turned down (by
Rusty) in favour of a (tunable) table in the UDP conntracker.  This
would be to further autoconfiguration which Rusty is a great fan of.


> I have not thought about the interplay with the current automatic
> timeout selection. Anybody?

Which is probably why doing it in the udp conntracker, in a tunable
table is the current way of thinking.  Should not be too difficult in
fact.  I would attempt it myself if I could get a decent stretch of
hacking time.

b.

-- 
Brian J. Murrell <netfilter@interlinx.bc.ca>

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]