Date: Fri, 25 Jan 2002 17:28:38 +0100 From: "Sebastien Petit" <spe@selectbourse.net> To: <net@freebsd.org> Subject: Timeouts on dynamic ipfw rules Message-ID: <009301c1a5bd$616efc30$13c92c0a@intra.selectbourse.net>
next in thread | raw e-mail | index | archive | help
This is a multi-part message in MIME format. ------=_NextPart_000_0090_01C1A5C5.B9E7EF90 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi, Is there a way to set per keep-state rule timeout ? I want to have a little ack timeout for connection to mysql database = tcp 3306 but a long ack timeout for other rules. if not perhaps this syntax can be implemented on ipfw code, for example: ipfw add ... keepstate setup timeout-ack 3600 or ipfw add ... keepstate setup timeout-syn 50 Perhaps I can do this stuff if there are no objections ? Sebastien. --=20 spe@bsdfr.org ------=_NextPart_000_0090_01C1A5C5.B9E7EF90 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META content=3D"text/html; charset=3Diso-8859-1" = http-equiv=3DContent-Type> <META content=3D"MSHTML 5.00.2014.210" name=3DGENERATOR> <STYLE></STYLE> </HEAD> <BODY bgColor=3D#ffffff> <DIV><FONT face=3DArial size=3D2> <DIV><FONT face=3DArial size=3D2>Hi,</FONT></DIV> <DIV> </DIV> <DIV><FONT face=3DArial size=3D2>Is there a way to set per keep-state = rule timeout=20 ?</FONT></DIV> <DIV><FONT face=3DArial size=3D2>I want to have a little ack timeout for = connection=20 to mysql database tcp 3306 but a long ack timeout for other=20 rules.</FONT></DIV> <DIV><FONT face=3DArial size=3D2>if not perhaps this syntax can be = implemented on=20 ipfw code, for example:</FONT></DIV> <DIV><FONT face=3DArial size=3D2>ipfw add ... keepstate setup = timeout-ack=20 3600</FONT></DIV> <DIV>or</DIV> <DIV><FONT face=3DArial size=3D2>ipfw add ... keepstate setup = timeout-syn=20 50</FONT></DIV> <DIV> </DIV> <DIV>Perhaps I can do this stuff if there are no objections ?</DIV> <DIV> </DIV> <DIV><FONT face=3DArial size=3D2>Sebastien.</FONT></DIV> <DIV><FONT face=3DArial size=3D2>-- </FONT></DIV> <DIV><FONT face=3DArial size=3D2><A=20 href=3D"mailto:spe@bsdfr.org">spe@bsdfr.org</A></FONT></DIV> <DIV> </DIV></FONT></DIV></BODY></HTML> ------=_NextPart_000_0090_01C1A5C5.B9E7EF90-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?009301c1a5bd$616efc30$13c92c0a>