This repository has been archived on 2022-02-17. You can view files and clone it, but cannot push or open issues or pull requests.

Jan Kasprzak f87fb666bb netfilter: nf_ct_icmp: keep the ICMP ct entries longer ... Current conntrack code kills the ICMP conntrack entry as soon as the first reply is received. This is incorrect, as we then see only the first ICMP echo reply out of several possible duplicates as ESTABLISHED, while the rest will be INVALID. Also this unnecessarily increases the conntrackd traffic on H-A firewalls. Make all the ICMP conntrack entries (including the replied ones) last for the default of nf_conntrack_icmp{,v6}_timeout seconds. Signed-off-by: Jan "Yenya" Kasprzak <kas@fi.muni.cz> Signed-off-by: Patrick McHardy <kaber@trash.net>		2009-06-08 15:53:43 +02:00
..
nf_conntrack_ipv4.h	netfilter: nf_conntrack: remove unnecessary function declaration	2008-06-09 16:00:22 -07:00
nf_defrag_ipv4.h	netfilter: split netfilter IPv4 defragmentation into a separate module	2008-10-08 11:35:12 +02:00