On Sun, 10 Nov 2024 at 14:50, Florian Westphal <fw@xxxxxxxxx> wrote: > > Florian Westphal <fw@xxxxxxxxx> wrote: > > Antonio Ojea <antonio.ojea.garcia@xxxxxxxxx> wrote: > > > On Fri, 18 Oct 2024 at 13:33, Florian Westphal <fw@xxxxxxxxx> wrote: > > > > Same as what happens now, 2nd packet follows NAT mapping of first one. > > > > > > This looks like the way to go ... if you can send me a patch I can do > > > some testing next week and report back > > > > Here is a better patch, renew only when responses are seen. > > This means that once either initiator or responder ceases to send > > packets entry will time out. > > > > Subject: netfilter: nf_conntrack_proto_udp: renew timeout only for bidirectional traffic > > Ping. Did you have a chance to test this? Sorry, I'm out all this week on Kubecon and previous weeks there was a lot of work with the kubernetes release. I will try to do it the week of 25t of Nov