Skip to content
  • Kelvie Wong's avatar
    netfilter: nf_ct_expect: partially implement ctnetlink_change_expect · 9768e1ac
    Kelvie Wong authored
    
    
    This refreshes the "timeout" attribute in existing expectations if one is
    given.
    
    The use case for this would be for userspace helpers to extend the lifetime
    of the expectation when requested, as this is not possible right now
    without deleting/recreating the expectation.
    
    I use this specifically for forwarding DCERPC traffic through:
    
    DCERPC has a port mapper daemon that chooses a (seemingly) random port for
    future traffic to go to. We expect this traffic (with a reasonable
    timeout), but sometimes the port mapper will tell the client to continue
    using the same port. This allows us to extend the expectation accordingly.
    
    Signed-off-by: default avatarKelvie Wong <kelvie@ieee.org>
    Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
    9768e1ac