From owner-freebsd-ipfw Sun Mar 25 22:13:57 2001 Delivered-To: freebsd-ipfw@freebsd.org Received: from info.iet.unipi.it (info.iet.unipi.it [131.114.9.184]) by hub.freebsd.org (Postfix) with ESMTP id 8127237B719 for ; Sun, 25 Mar 2001 22:13:55 -0800 (PST) (envelope-from luigi@info.iet.unipi.it) Received: (from luigi@localhost) by info.iet.unipi.it (8.9.3/8.9.3) id IAA67110; Mon, 26 Mar 2001 08:13:35 +0200 (CEST) (envelope-from luigi) From: Luigi Rizzo Message-Id: <200103260613.IAA67110@info.iet.unipi.it> Subject: half-close timeout in stateful ipfw To: ipfw@freebsd.org Date: Mon, 26 Mar 2001 08:13:35 +0200 (CEST) X-Mailer: ELM [version 2.4ME+ PL61 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-ipfw@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Hi, I received a request from an ipfw user to change the timeout for half-closed connections from dyn_fin_lifetime to something different, such as dyn_ack_lifetime -- the requestor claims that there are many cases where a web client aborts the connection when the (remote) server becomes too slow, and in such cases the dynamic rule timeout for half-closed connection often expires before the fin from the other side comes in. The request seems reasonable, so if there are no objections I would like to ask jordan permission to commit this to 4.3 cheers luigi ----------------------------------+----------------------------------------- Luigi RIZZO, luigi@iet.unipi.it . ACIRI/ICSI (on leave from Univ. di Pisa) http://www.iet.unipi.it/~luigi/ . 1947 Center St, Berkeley CA 94704 Phone (510) 666 2927 . ----------------------------------+----------------------------------------- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ipfw" in the body of the message