[Nufw-devel] Re: [PATCH 3/3] [conntrack] fixed duration connection

[Eric Leblond]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi again,

This is better with the patch...

All my apologies

BR,

Eric Leblond wrote:
> Hi,
> 
> This patch against conntrack tool adds support for fixed connection. for
> example  :
>  conntrack  -U -d 153.113.34.136 -s 192.168.11.32 -p tcp \\
>       --orig-port-src 59119 --orig-port-dst 22 -t 10 \\
>       -u ASSURED,SEEN_REPLY,FIXED_TIMEOUT
> will fix timeout of connection to 10 seconds after command.
> 
> BR,


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFENuLEnxA7CdMWjzIRAiKaAJ9tC+/xQ44ibVF1ioAakWn9JC7mbgCdFGiO
vZLLCcIN08G45vaNsru4TAw=
=BWXz
-----END PGP SIGNATURE-----

Index: src/conntrack.c
===================================================================
--- src/conntrack.c     (révision 6578)
+++ src/conntrack.c     (copie de travail)
@@ -335,13 +335,13 @@
 #define PARSE_MAX 2
 
 static struct parse_parameter {
-       char    *parameter[5];
+       char    *parameter[6];
        size_t  size;
-       unsigned int value[5];
+       unsigned int value[6];
 } parse_array[PARSE_MAX] = {
-       { {"ASSURED", "SEEN_REPLY", "UNSET", "SRC_NAT", "DST_NAT"}, 5,
+       { {"ASSURED", "SEEN_REPLY", "UNSET", "SRC_NAT", 
"DST_NAT","FIXED_TIMEOUT"}, 6,
          { IPS_ASSURED, IPS_SEEN_REPLY, 0, 
-           IPS_SRC_NAT_DONE, IPS_DST_NAT_DONE} },
+           IPS_SRC_NAT_DONE, IPS_DST_NAT_DONE, IPS_FIXED_TIMEOUT} },
        { {"ALL", "NEW", "UPDATES", "DESTROY"}, 4,
          {~0U, NF_NETLINK_CONNTRACK_NEW, NF_NETLINK_CONNTRACK_UPDATE, 
           NF_NETLINK_CONNTRACK_DESTROY} },