On Mon, 21 Apr 2014, Shannon Wynter wrote: > It would essentially work like the regular timeout, removing the entry from > the set but only if no matches on the entry for the duration of the timeout > > eg: > Add a match for 8.8.8.8 for 300 seconds. > If there is a match on 8.8.8.8 at 250 seconds then the timer is reset. > If there is no match on 8.8.8.8 for 300 then the entry is removed > > I wouldn't mind having a look at this myself but don't really know the first That's equivalent with "match and re-add the element", which can easily be achieved with a rule like: ... -m set --match-set .... -j SET --add-set ... (or if you need multiple actions, then jump to a proper chain). Best regards, Jozsef - E-mail : kadlec@xxxxxxxxxxxxxxxxx, kadlecsik.jozsef@xxxxxxxxxxxxx PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt Address : Wigner Research Centre for Physics, Hungarian Academy of Sciences H-1525 Budapest 114, POB. 49, Hungary -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
