From: Matt <matt-nft@mailtower.de>
To: netfilter@vger.kernel.org, netfilter-owner@vger.kernel.org
Subject: Named sets with timeout
Date: Mon, 28 Oct 2019 21:25:17 +0100 [thread overview]
Message-ID: <cd3973f01a86ebc50a7fae9da40f29ce@mailtower.de> (raw)
Dear nft Forum,
I’m a big friend of named sets, specially the timeout function is very
great.
But one thing is confusing me, assume the following named:
table ip filter_v4 {
set my_drop {
type ipv4_addr
flags timeout
}
...
...
}
Then i add the following sample element to it:
/usr/sbin/nft add set ip filter_v4 my_drop \{type ipv4_addr \; flags
timeout \; elements=\{a.b.c.d timeout 600s \} \;\}
All good so far, a.b.c.d is counting down as expected, begiing with
10min.
But when i wait - say 1 minute and repeat the 'nft add set ... 600s'
command from above then the timer remains unchanged (?)
It looks as the timer cannot get changed anymore once it has been
initialized
Is this behavior by purpose?
And if, am I right to delete the element and re-assign it if I want to
get the timer updated?
Many thanks
Matt
next reply other threads:[~2019-10-28 20:25 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2019-10-28 20:25 Matt [this message]
2019-10-29 0:23 ` Named sets with timeout Trent W. Buck
2019-10-29 1:35 ` Duncan Roe
2019-10-29 8:00 ` Laura Garcia
2019-10-30 1:12 ` Trent W. Buck
2019-10-30 8:06 ` Laura Garcia
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=cd3973f01a86ebc50a7fae9da40f29ce@mailtower.de \
--to=matt-nft@mailtower.de \
--cc=netfilter-owner@vger.kernel.org \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.