target for modifying conntrack timeout value
richard at o-matrix.org
Tue Dec 7 03:12:25 CET 2004
> netfilter moved to subversion some time ago. See announce in the list
> It appears the web pages have not been updated yet with the new
> information on how to access the subversion repository.
Ok, I got the latest svn. However I have trouble to get a diff between it
and my working copy. "svn diff" only diffs the existing files and does
generate a patch for new files.
Anyway, I attached this tar.gz file which is extracted into netfilter
directory. Then run "patch -p0 Makefile.diff".
I don't write a 'match' for expire timers because it is already available
through 'match conntrack' with ctexpire option.
It is only available for kernel 2.4, at least for now.
The related man page part is,
This is used to modify the conntrack expire field. The conntrack
expire field determines how much time left (in seconds) for the conntrack.
The conntrack will be deleted or changed to a new state when the expire
field reachs 0.
Set the conntrack expire value to `value' (in seconds).
Decrement the conntrack expire value `value' (in
seconds), i.e. make it live shorter.
Increment the conntrack expire value `value' (in seconds),
i.e. make it live longer.
The help of iptables is,
CTEXPIRE target v1.3.0 options
--ctexpire-set value Set conntrack expire to <value>
--ctexpire-dec value Decrement conntrack expire by <value>
--ctexpire-inc value Increment conntrack expire by <value>
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 4672 bytes
Desc: not available
Url : /pipermail/netfilter-devel/attachments/20041206/34b56bad/CTEXPIRE.tar.bin
More information about the netfilter-devel