FreeBSD Bugzilla – Attachment 11145 Details for
Bug 22065
Patch to add support to ipfw for per rule overriding of dynamic keep-state rule expiration lifetimes
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
Remember
[x]
|
Forgot Password
Login:
[x]
[patch]
file.diff
file.diff (text/plain), 1.26 KB, created by
agifford
on 2000-10-17 23:40:01 UTC
(
hide
)
Description:
file.diff
Filename:
MIME Type:
Creator:
agifford
Created:
2000-10-17 23:40:01 UTC
Size:
1.26 KB
patch
obsolete
>--- sys/netinet/ip_fw.c.orig Tue Oct 17 07:44:57 2000 >+++ sys/netinet/ip_fw.c Tue Oct 17 16:08:36 2000 >@@ -722,7 +722,7 @@ > break ; > case TH_SYN | (TH_SYN << 8) : > /* move to established */ >- q->expire = time_second + dyn_ack_lifetime ; >+ q->expire = time_second + (q->lifetime ? q->lifetime : dyn_ack_lifetime) ; > break ; > case TH_SYN | (TH_SYN << 8) | TH_FIN : > case TH_SYN | (TH_SYN << 8) | (TH_FIN << 8) : >@@ -747,7 +747,7 @@ > } > } else { > /* should do something for UDP and others... */ >- q->expire = time_second + dyn_short_lifetime ; >+ q->expire = time_second + (q->lifetime ? q->lifetime : dyn_short_lifetime) ; > } > if (match_direction) > *match_direction = dir ; >@@ -795,7 +795,13 @@ > if (mask) > r->mask = *mask ; > r->id = *id ; >- r->expire = time_second + dyn_syn_lifetime ; >+ r->lifetime = chain->rule->fw_dyn_lifetime ; >+ if (r->lifetime) >+ r->expire = time_second + r->lifetime ; >+ else if (r->id.proto == IPPROTO_TCP) >+ r->expire = time_second + dyn_syn_lifetime ; >+ else >+ r->expire = time_second + dyn_short_lifetime ; > r->chain = chain ; > r->type = ((struct ip_fw_ext *)chain->rule)->dyn_type ;
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 22065
:
11144
| 11145 |
11146