All of lore.kernel.org
 help / color / mirror / Atom feed
From: Matt <matt-nft@mailtower.de>
To: netfilter@vger.kernel.org, netfilter-owner@vger.kernel.org
Subject: Named sets with timeout
Date: Mon, 28 Oct 2019 21:25:17 +0100	[thread overview]
Message-ID: <cd3973f01a86ebc50a7fae9da40f29ce@mailtower.de> (raw)

Dear nft Forum,
I’m a big friend of named sets, specially the timeout function is very 
great.
But one thing is confusing me, assume the following named:

table ip filter_v4 {
   set my_drop {
     type ipv4_addr
     flags timeout
   }
  ...
  ...
}


Then i add the following sample element to it:
   /usr/sbin/nft add set ip filter_v4 my_drop \{type ipv4_addr \; flags 
timeout \; elements=\{a.b.c.d timeout 600s  \} \;\}

All good so far, a.b.c.d is counting down as expected, begiing with 
10min.
But when i wait - say 1 minute and repeat the 'nft add set ... 600s' 
command from above then the timer remains unchanged (?)
It looks as the timer cannot get changed anymore once it has been 
initialized

Is this behavior by purpose?
And if, am I right to delete the element and re-assign it if I want to 
get the timer updated?

Many thanks
Matt









             reply	other threads:[~2019-10-28 20:25 UTC|newest]

Thread overview: 6+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2019-10-28 20:25 Matt [this message]
2019-10-29  0:23 ` Named sets with timeout Trent W. Buck
2019-10-29  1:35   ` Duncan Roe
2019-10-29  8:00   ` Laura Garcia
2019-10-30  1:12     ` Trent W. Buck
2019-10-30  8:06       ` Laura Garcia

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=cd3973f01a86ebc50a7fae9da40f29ce@mailtower.de \
    --to=matt-nft@mailtower.de \
    --cc=netfilter-owner@vger.kernel.org \
    --cc=netfilter@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.