From owner-freebsd-net Fri Jan 25 11:39:40 2002 Delivered-To: freebsd-net@freebsd.org Received: from iguana.icir.org (iguana.icir.org [192.150.187.36]) by hub.freebsd.org (Postfix) with ESMTP id 3D82F37B41C for ; Fri, 25 Jan 2002 11:39:33 -0800 (PST) Received: (from rizzo@localhost) by iguana.icir.org (8.11.3/8.11.3) id g0PJdTT81186; Fri, 25 Jan 2002 11:39:29 -0800 (PST) (envelope-from rizzo) Date: Fri, 25 Jan 2002 11:39:29 -0800 From: Luigi Rizzo To: Sebastien Petit Cc: net@FreeBSD.ORG Subject: Re: Timeouts on dynamic ipfw rules Message-ID: <20020125113929.B80956@iguana.icir.org> References: <009301c1a5bd$616efc30$13c92c0a@intra.selectbourse.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <009301c1a5bd$616efc30$13c92c0a@intra.selectbourse.net> User-Agent: Mutt/1.3.23i Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org there were patches floating around for something similar. cheers luigi On Fri, Jan 25, 2002 at 05:28:38PM +0100, Sebastien Petit wrote: > Hi, > > Is there a way to set per keep-state rule timeout ? > I want to have a little ack timeout for connection to mysql database tcp 3306 but a long ack timeout for other rules. > if not perhaps this syntax can be implemented on ipfw code, for example: > ipfw add ... keepstate setup timeout-ack 3600 > or > ipfw add ... keepstate setup timeout-syn 50 > > Perhaps I can do this stuff if there are no objections ? > > Sebastien. > -- > spe@bsdfr.org > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message