http://wiki.nftables.org/wiki-nftables/index.php?action=history&feed=atom&title=Ct_timeout 2026-05-13T18:15:44Z Revision history for this page on the wiki MediaWiki 1.43.6 http://wiki.nftables.org/wiki-nftables/index.php?title=Ct_timeout&diff=859&oldid=prev 2021-04-07T20:36:27Z

<p>Created initial page, using example from nftables 0.9.1 release notes.</p> <p><b>New page</b></p><div>You can use a &#039;&#039;ct timeout&#039;&#039; object to specify a [[Connection_Tracking_System|connection tracking]] timeout policy for a particular flow.<br /> <br /> The partial ruleset below defines a &#039;&#039;ct timeout&#039;&#039; named &#039;&#039;agressive-tcp&#039;&#039; and then attaches it to a rule to override the default timeout policy for packets going to port tcp/8888:<br /> <br /> &lt;source&gt;<br /> table inet ct_timeout_demo {<br /> <br /> ct timeout agressive-tcp {<br /> l3proto ip;<br /> protocol tcp;<br /> policy = {established: 100, close_wait: 4, close: 4}<br /> }<br /> <br /> chain output {<br /> tcp dport 8888 ct timeout set &quot;agressive-tcp&quot;<br /> }<br /> }<br /> &lt;/source&gt;<br /> <br /> Support for &#039;&#039;ct timeout&#039;&#039; was added in [https://marc.info/?l=netfilter&amp;m=156139496810281&amp;w=2 nftables&amp;nbsp;0.9.1].</div>

Fmyhr