projects / project / firewall4.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 3b5a033) | patch
fw4: support sets with timeout capability but without default expiry
authorJo-Philipp Wich <jo@mein.io>
Fri, 17 Jun 2022 08:13:34 +0000 (10:13 +0200)
committerStijn Tintel <stijn@linux-ipv6.be>
Fri, 17 Jun 2022 11:32:43 +0000 (14:32 +0300)
commitd79911c7ad40645ab21eaadf09c281fe998e3769
treeb9b52471f5579aa4ed879c5ff98a43cbc554e15dtree | snapshot
parent3b5a0338b35d594511ff057ddc033c928e23a4fbcommit | diff
fw4: support sets with timeout capability but without default expiry

Configure the set timeout flag explicitly and do not rely on nftables
inferring it from the defualt timeout value.

This allows treating uci `option timeout 0` specially, means enabling
the timeout capability flag on a set but do not emit a `timeout`
statement.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Tested-by: Stijn Tintel <stijn@linux-ipv6.be>
root/usr/share/firewall4/templates/ruleset.uc diff | blob | history
root/usr/share/ucode/fw4.uc diff | blob | history
OpenWrt nftables firewall