]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: nf_ct_expect: partially implement ctnetlink_change_expect
authorKelvie Wong <kelvie@ieee.org>
Wed, 2 May 2012 14:39:24 +0000 (14:39 +0000)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 8 May 2012 17:40:59 +0000 (19:40 +0200)
commit972906952db0af8c305dabd9b89a387576df470d
tree42b47bc693694767bff2820811896a7b1580b58d
parent8ea25b78df5a385f1f7be4d7c5f92ad64311782f
netfilter: nf_ct_expect: partially implement ctnetlink_change_expect

This refreshes the "timeout" attribute in existing expectations if one is
given.

The use case for this would be for userspace helpers to extend the lifetime
of the expectation when requested, as this is not possible right now
without deleting/recreating the expectation.

I use this specifically for forwarding DCERPC traffic through:

DCERPC has a port mapper daemon that chooses a (seemingly) random port for
future traffic to go to. We expect this traffic (with a reasonable
timeout), but sometimes the port mapper will tell the client to continue
using the same port. This allows us to extend the expectation accordingly.

Signed-off-by: Kelvie Wong <kelvie@ieee.org>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_conntrack_netlink.c