From owner-freebsd-net Fri Jan 25 8:28:58 2002 Delivered-To: freebsd-net@freebsd.org Received: from sbserv0.intra.selectbourse.net (ATuileries-103-2-1-140.abo.wanadoo.fr [193.252.55.140]) by hub.freebsd.org (Postfix) with ESMTP id D806E37B402 for ; Fri, 25 Jan 2002 08:28:53 -0800 (PST) Received: from pc201019 (unknown [172.16.5.1]) by sbserv0.intra.selectbourse.net (Postfix) with SMTP id B6A18BA53 for ; Fri, 25 Jan 2002 17:28:49 +0100 (CET) Message-ID: <009301c1a5bd$616efc30$13c92c0a@intra.selectbourse.net> From: "Sebastien Petit" To: Subject: Timeouts on dynamic ipfw rules Date: Fri, 25 Jan 2002 17:28:38 +0100 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0090_01C1A5C5.B9E7EF90" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2014.211 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2014.211 Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org This is a multi-part message in MIME format. ------=_NextPart_000_0090_01C1A5C5.B9E7EF90 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi, Is there a way to set per keep-state rule timeout ? I want to have a little ack timeout for connection to mysql database = tcp 3306 but a long ack timeout for other rules. if not perhaps this syntax can be implemented on ipfw code, for example: ipfw add ... keepstate setup timeout-ack 3600 or ipfw add ... keepstate setup timeout-syn 50 Perhaps I can do this stuff if there are no objections ? Sebastien. --=20 spe@bsdfr.org ------=_NextPart_000_0090_01C1A5C5.B9E7EF90 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Hi,

Is there a way to set per keep-state = rule timeout=20 ?

I want to have a little ack timeout for = connection=20 to mysql database tcp 3306 but a long ack timeout for other=20 rules.

if not perhaps this syntax can be = implemented on=20 ipfw code, for example:

ipfw add ... keepstate setup = timeout-ack=20 3600

ipfw add ... keepstate setup = timeout-syn=20 50

Perhaps I can do this stuff if there are no objections ?

Sebastien.

spe@bsdfr.org

------=_NextPart_000_0090_01C1A5C5.B9E7EF90-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message