netfilter: nf_flow_table: conntrack picks up expired flows
Update conntrack entry to pick up expired flows, otherwise the conntrack entry gets stuck with the internal offload timeout (one day). The TCP state also needs to be adjusted to ESTABLISHED state and tracking is set to liberal mode in order to give conntrack a chance to pick up the expired flow. Fixes: ac2a6666 ("netfilter: add generic flow table infrastructure") Signed-off-by:Pablo Neira Ayuso <pablo@netfilter.org>
parent
6a0a8d10
Please register or sign in to comment