Re: iptables pull request, add XT_RECENT_REAP support

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Le mercredi 17 mars 2010 à 13:44 -0600, Tim Gardner a écrit :
> On 03/17/2010 01:34 PM, Eric Dumazet wrote:
> > Le mercredi 17 mars 2010 à 12:48 -0600, Tim Gardner a écrit :
> >> diff --git a/extensions/libxt_recent.man b/extensions/libxt_recent.man
> >> index 532c328..26e4fb9 100644
> >> --- a/extensions/libxt_recent.man
> >> +++ b/extensions/libxt_recent.man
> >> @@ -41,6 +41,11 @@ This option must be used in conjunction with one of \fB\-\-rcheck\fP or
> >>   \fB\-\-update\fP. When used, this will narrow the match to only happen when the
> >>   address is in the list and was seen within the last given number of seconds.
> >>   .TP
> >> +\fB\-\-reap\fP \fIreap\fP
> >> +This option must be used in conjunction with \fB\-\-seconds\fP. When used, this
> >> +will remove entries with the most recent timestamp older then \fB\-\-seconds\fP
> >> +since the last packet was received.
> >> +.TP
> >>   \fB\-\-hitcount\fP \fIhits\fP
> >>   This option must be used in conjunction with one of \fB\-\-rcheck\fP or
> >>   \fB\-\-update\fP. When used, this will narrow the match to only happen when the
> >
> > Are you sure this "most recent timestamp older then " is correct ? ;)
> >
> >
> >
> 
> That does kind of make my head hurt. Perhaps it is better stated, "When 
> used, this will remove entries that have not received a packet in the 
> time specified by --seconds."
> 

Well, it will remove the oldest entry, if its age is more than time
specifed by --seconds.

ie you wrote "most recent" instead of "least recent"  ----> "oldest"



--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux