From: Patrick Schaaf <bof@bof.de>
To: James Ralston <qralston+ml.netfilter-devel@andrew.cmu.edu>
Cc: netfilter-devel@lists.netfilter.org
Subject: Re: separation of sysctl and tcp-window-tracking patch?
Date: Fri, 13 Dec 2002 13:06:25 +0100 [thread overview]
Message-ID: <20021213120625.GA21253@oknodo.bof.de> (raw)
In-Reply-To: <Pine.LNX.4.44.0212130314131.2834-100000@shieldbreaker.l33tskillz.org>
> Failing a helper, I'm unable to come up with anything better than
> adjusting timeouts on a per-port basis...
What about a single new target, CTTIMEOUT or something, having a single
parameter, a relative timeout in seconds. Whenever that target hits,
and we have a connection hanging off our skb, the connection's timeout
will be refreshed to now+the_given_timeout.
This could be equally used to lower TCP ESTABLISHED timeouts for
certain uses, and for extending the UDP timeouts discussed here.
You would use normal, arbitrary matches to select _which_ packets
should receive the treatment.
I have not thought about the interplay with the current automatic
timeout selection. Anybody?
best regards
Patrick
next prev parent reply other threads:[~2002-12-13 12:06 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2002-12-12 14:14 separation of sysctl and tcp-window-tracking patch? Brian J. Murrell
2002-12-13 8:58 ` James Ralston
2002-12-13 12:06 ` Patrick Schaaf [this message]
2002-12-13 21:45 ` Brian J. Murrell
-- strict thread matches above, loose matches on Subject: below --
2002-11-01 2:12 netfilter
2002-12-12 8:05 ` James Ralston
2002-12-12 9:02 ` Jozsef Kadlecsik
2002-12-13 8:14 ` James Ralston
2002-12-13 14:17 ` Denis Ducamp
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20021213120625.GA21253@oknodo.bof.de \
--to=bof@bof.de \
--cc=netfilter-devel@lists.netfilter.org \
--cc=qralston+ml.netfilter-devel@andrew.cmu.edu \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.