Files
ack-tegra/include/linux
Pablo Neira Ayuso 24de58f465 netfilter: xt_CT: allow to attach timeout policy + glue code
This patch allows you to attach the timeout policy via the
CT target, it adds a new revision of the target to ensure
backward compatibility. Moreover, it also contains the glue
code to stick the timeout object defined via nfnetlink_cttimeout
to the given flow.

Example usage (it requires installing the nfct tool and
libnetfilter_cttimeout):

1) create the timeout policy:

 nfct timeout add tcp-policy0 inet tcp \
	established 1000 close 10 time_wait 10 last_ack 10

2) attach the timeout policy to the packet:

 iptables -I PREROUTING -t raw -p tcp -j CT --timeout tcp-policy0

You have to install the following user-space software:

a) libnetfilter_cttimeout:
   git://git.netfilter.org/libnetfilter_cttimeout

b) nfct:
   git://git.netfilter.org/nfct

You also have to get iptables with -j CT --timeout support.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2012-03-07 17:41:28 +01:00
..
2012-02-06 14:53:06 -05:00
2012-01-10 16:30:42 -08:00
2012-02-20 19:46:36 +11:00
2012-01-12 20:13:04 -08:00
2012-01-12 20:13:08 -08:00
2012-01-09 13:52:09 +01:00
2012-01-17 15:40:51 -08:00
2012-03-03 15:04:45 -05:00
2012-01-12 20:13:10 -08:00
2012-02-22 14:51:18 -05:00
2012-01-12 15:23:04 -08:00
2012-03-05 15:49:42 -08:00
2012-01-09 09:33:57 +09:00
2012-01-24 12:25:14 -08:00