Re: [PATCH nf-next v8] netfilter: nft_ct: add ct timeout support

2018-07-23 Thread Pablo Neira Ayuso
On Fri, Jul 20, 2018 at 11:13:37PM +0200, Harsha Sharma wrote: > On Fri, Jul 20, 2018 at 3:21 PM, Pablo Neira Ayuso > wrote: > > On Thu, Jul 19, 2018 at 03:10:14PM +0200, Harsha Sharma wrote: > >> On Thu, Jul 19, 2018 at 2:33 AM, Pablo Neira Ayuso > >> wrote: > > [...] > >> >> diff --git

Re: [PATCH nf-next v8] netfilter: nft_ct: add ct timeout support

2018-07-20 Thread Harsha Sharma
On Fri, Jul 20, 2018 at 3:21 PM, Pablo Neira Ayuso wrote: > On Thu, Jul 19, 2018 at 03:10:14PM +0200, Harsha Sharma wrote: >> On Thu, Jul 19, 2018 at 2:33 AM, Pablo Neira Ayuso >> wrote: > [...] >> >> diff --git a/net/netfilter/nf_tables_api.c b/net/netfilter/nf_tables_api.c >> >> index

Re: [PATCH nf-next v8] netfilter: nft_ct: add ct timeout support

2018-07-20 Thread Pablo Neira Ayuso
On Thu, Jul 19, 2018 at 03:10:14PM +0200, Harsha Sharma wrote: > On Thu, Jul 19, 2018 at 2:33 AM, Pablo Neira Ayuso > wrote: [...] > >> diff --git a/net/netfilter/nf_tables_api.c b/net/netfilter/nf_tables_api.c > >> index 3f211e1025c1..c1cf24b6db96 100644 > >> --- a/net/netfilter/nf_tables_api.c

Re: [PATCH nf-next v8] netfilter: nft_ct: add ct timeout support

2018-07-19 Thread Harsha Sharma
On Thu, Jul 19, 2018 at 2:33 AM, Pablo Neira Ayuso wrote: > On Thu, Jul 19, 2018 at 02:19:47AM +0200, Harsha Sharma wrote: >> This patch allows to add, list and delete connection tracking timeout >> policies via nft objref infrastructure and assigning these timeout >> via nft rule. >> >> Ruleset:

Re: [PATCH nf-next v8] netfilter: nft_ct: add ct timeout support

2018-07-18 Thread Pablo Neira Ayuso
On Thu, Jul 19, 2018 at 02:19:47AM +0200, Harsha Sharma wrote: > This patch allows to add, list and delete connection tracking timeout > policies via nft objref infrastructure and assigning these timeout > via nft rule. > > Ruleset: > > table ip raw { >ct timeout cttime { >protocol

[PATCH nf-next v8] netfilter: nft_ct: add ct timeout support

2018-07-18 Thread Harsha Sharma
This patch allows to add, list and delete connection tracking timeout policies via nft objref infrastructure and assigning these timeout via nft rule. Ruleset: table ip raw { ct timeout cttime { protocol tcp established 111 close 13 l3proto ip } chain output {