netfilter: ipset: timeout can be modified for already added elements

Browse source

When an element to a set with timeout added, one can change the timeout
by "readding" the element with the "-exist" flag. That means the timeout
value is reset to the specified one (or to the default from the set
specification if the "timeout n" option is not used). Example

ipset add foo 1.2.3.4 timeout 10
ipset add foo 1.2.3.4 timeout 600 -exist

Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Signed-off-by: Patrick McHardy <kaber@trash.net>

...

This commit is contained in:

Jozsef Kadlecsik 2011-06-16 18:40:55 +02:00 • committed by Patrick McHardy

parent 619c15171f

commit 5416219e5c

12 changed files with 136 additions and 101 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

3

include/linux/netfilter/ipset/ip_set.h

View file

15

include/linux/netfilter/ipset/ip_set_ahash.h

View file