[PATCH] ipset type "expire"

Clifford Wolf clifford at clifford.at
Thu May 19 15:24:15 CEST 2005


I've already mailed with Jozsef Kadlecsik about this patch in March. It
seamed to me as he liked it, but it did not show up in the netfilter
subversion repository so far..


This patch adds an "expire" ipset type. The entries in such IP sets expire
automatically after the specified timeout. This is useful e.g. for
portknocking setups or blacklisting IPs for some time without any userland
daemons running.

Please apply the patch in the subversion repository or comment on it if you
think it should not be included..

 - clifford

SSSS PPPP L     The SPL Programming Language
S    P  P L     http://www.clifford.at/spl/
SSSS PPPP L     ----------------------------------------------------
   S P    L     An object oriented, stateful, simple, small, c-like,
SSSS P    LLLL  embeddable, feature rich, dynamic scripting language
Hardware /nm./: the part of the computer that you can kick.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : /pipermail/netfilter-devel/attachments/20050519/88783915/attachment.bin

More information about the netfilter-devel mailing list