[Nufw-devel] Re: [PATCH 2/3] [libnetfilter_conntrack] fixed duration connection

[Eric Leblond]

Patrick McHardy wrote:
> Eric Leblond wrote:
> 
>>Hi,
>>
>>This patch add support for the IPS_FIXED_TIMEOUT state.

> I didn't see the patch adding support for this in the kernel. Since
> there is no seperate fixed timeout anymore, this also looks obsolete.
> The way I understood the kernel patch, you would just do two netlink
> operations:
> 
> - set flag FIXED_TIMEOUT
> - change timeout using CTA_TIMEOUT
> 
> Am I missing something?

Clearly not. I was a little bit too tired yesterday and I've done a "svn
diff" in the bad directory. Please ignore previous patch and consider
this far smaller one.

Best regards,
--
Eric Leblond

Index: include/libnetfilter_conntrack/libnetfilter_conntrack.h
===================================================================
--- include/libnetfilter_conntrack/libnetfilter_conntrack.h     (révision 6578)
+++ include/libnetfilter_conntrack/libnetfilter_conntrack.h     (copie de 
travail)
@@ -191,6 +191,11 @@
        /* Connection is dying (removed from lists), can not be unset. */
        IPS_DYING_BIT = 9,
        IPS_DYING = (1 << IPS_DYING_BIT),
+
+    /* Connection has fixed timeout. */
+       IPS_FIXED_TIMEOUT_BIT = 10,
+       IPS_FIXED_TIMEOUT = (1 << IPS_FIXED_TIMEOUT_BIT),
+
 };
 
 enum {