Re: [PATCH 3/3] [conntrack] fixed duration connection

[Eric Leblond <eric@inl.fr>]

[-- Attachment #1: Type: text/plain, Size: 717 bytes --]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi again,

This is better with the patch...

All my apologies

BR,

Eric Leblond wrote:
> Hi,
> 
> This patch against conntrack tool adds support for fixed connection. for
> example  :
>  conntrack  -U -d 153.113.34.136 -s 192.168.11.32 -p tcp \\
> 	--orig-port-src 59119 --orig-port-dst 22 -t 10 \\
> 	-u ASSURED,SEEN_REPLY,FIXED_TIMEOUT
> will fix timeout of connection to 10 seconds after command.
> 
> BR,


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFENuLEnxA7CdMWjzIRAiKaAJ9tC+/xQ44ibVF1ioAakWn9JC7mbgCdFGiO
vZLLCcIN08G45vaNsru4TAw=
=BWXz
-----END PGP SIGNATURE-----

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #2: conntrack_fixed_timeout-flag.patch --]
[-- Type: text/x-patch; name="conntrack_fixed_timeout-flag.patch", Size: 830 bytes --]

Index: src/conntrack.c
===================================================================
--- src/conntrack.c	(révision 6578)
+++ src/conntrack.c	(copie de travail)
@@ -335,13 +335,13 @@
 #define PARSE_MAX 2
 
 static struct parse_parameter {
-	char 	*parameter[5];
+	char 	*parameter[6];
 	size_t  size;
-	unsigned int value[5];
+	unsigned int value[6];
 } parse_array[PARSE_MAX] = {
-	{ {"ASSURED", "SEEN_REPLY", "UNSET", "SRC_NAT", "DST_NAT"}, 5,
+	{ {"ASSURED", "SEEN_REPLY", "UNSET", "SRC_NAT", "DST_NAT","FIXED_TIMEOUT"}, 6,
 	  { IPS_ASSURED, IPS_SEEN_REPLY, 0, 
-	    IPS_SRC_NAT_DONE, IPS_DST_NAT_DONE} },
+	    IPS_SRC_NAT_DONE, IPS_DST_NAT_DONE, IPS_FIXED_TIMEOUT} },
 	{ {"ALL", "NEW", "UPDATES", "DESTROY"}, 4,
 	  {~0U, NF_NETLINK_CONNTRACK_NEW, NF_NETLINK_CONNTRACK_UPDATE, 
 	   NF_NETLINK_CONNTRACK_DESTROY} },