On 2018-07-20 15:08, Pablo Neira Ayuso wrote: > From: Florian Westphal <fw@xxxxxxxxx> > > This is one of the very few external callers of ->get_timeouts(), > > We can use a fixed timeout instead, conntrack core will refresh this in > case a new packet comes within this period. > > Use of ESTABLISHED timeout seems way too huge anyway. It seems to me that this could easily break long-lived connections that are idle most of the time. - Felix -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
