[Nufw-devel] Re: [PATCH 2/3] [libnetfilter_conntrack] fixed duration connection

[Patrick McHardy]

Eric Leblond wrote:
> Hi,
> 
> This patch add support for the IPS_FIXED_TIMEOUT state.
> 
> BR,
> --
> Regit
> 
> 
> ------------------------------------------------------------------------
> 
> Index: include/libnetfilter_conntrack/linux_nfnetlink_conntrack.h
> ===================================================================
> --- include/libnetfilter_conntrack/linux_nfnetlink_conntrack.h        
> (révision 6576)
> +++ include/libnetfilter_conntrack/linux_nfnetlink_conntrack.h        (copie 
> de travail)
> @@ -29,6 +29,7 @@
>       CTA_HELP,
>       CTA_NAT,
>       CTA_TIMEOUT,
> +     CTA_FIXED_TIMEOUT,
>       CTA_MARK,
>       CTA_COUNTERS_ORIG,
>       CTA_COUNTERS_REPLY,

I didn't see the patch adding support for this in the kernel. Since
there is no seperate fixed timeout anymore, this also looks obsolete.
The way I understood the kernel patch, you would just do two netlink
operations:

- set flag FIXED_TIMEOUT
- change timeout using CTA_TIMEOUT

Am I missing something?