Re: Timeouts on dynamic ipfw rules

2002-02-01 Thread Aaron D. Gifford
I recently was heard to elocute: >Memory wise, the patches only increase memory use in the dynamic rules (a >single unsigned short), using a union to store the information in the main >ruleset since for keep-state rules the union in question was not in use (or >so I believe - no one has told me

Re: Timeouts on dynamic ipfw rules

2002-01-31 Thread Aaron D. Gifford
Sebastien Petit ([EMAIL PROTECTED]) was heard to say: >I found your patches for 5.0-CURRENT, I will update it for 4.4 and 4.5, >thank you Crist. >Will this patch be commited in 5.0-RELEASE or perhaps 4.6 ? I think >this is a good functionnality imho. > >-- >Sebastien Petit >[EMAIL PROTECTED] >Th

Re: Timeouts on dynamic ipfw rules

2002-01-26 Thread spe
I found your patches for 5.0-CURRENT, I will update it for 4.4 and 4.5, thank you Crist. Will this patch be commited in 5.0-RELEASE or perhaps 4.6 ? I think this is a good functionnality imho. -- Sebastien Petit [EMAIL PROTECTED] The HUT Project http://www.bsdshell.net/ On 2002.01.26 02:53 Cri

Re: Timeouts on dynamic ipfw rules

2002-01-25 Thread Crist J. Clark
On Fri, Jan 25, 2002 at 11:39:29AM -0800, Luigi Rizzo wrote: > there were patches floating around for something similar. > > cheers > luigi > > On Fri, Jan 25, 2002 at 05:28:38PM +0100, Sebastien Petit wrote: > > Hi, > > > > Is there a way to set per keep-state rule timeout ? > > I

Re: Timeouts on dynamic ipfw rules

2002-01-25 Thread Luigi Rizzo
there were patches floating around for something similar. cheers luigi On Fri, Jan 25, 2002 at 05:28:38PM +0100, Sebastien Petit wrote: > Hi, > > Is there a way to set per keep-state rule timeout ? > I want to have a little ack timeout for connection to mysql database tcp 3306

Timeouts on dynamic ipfw rules

2002-01-25 Thread Sebastien Petit
Hi,   Is there a way to set per keep-state rule timeout ? I want to have a little ack timeout for connection to mysql  database tcp 3306 but a long ack timeout for other rules. if not perhaps this syntax can be implemented on ipfw code, for example: ipfw add ... keepstate setup timeout-ack