Florian Westphal d535c8a69c netfilter: conntrack: udp: only extend timeout to stream mode after 2s ... Currently DNS resolvers that send both A and AAAA queries from same source port can trigger stream mode prematurely, which results in non-early-evictable conntrack entry for three minutes, even though DNS requests are done in a few milliseconds. Add a two second grace period where we continue to use the ordinary 30-second default timeout. Its enough for DNS request/response traffic, even if two request/reply packets are involved. ASSURED is still set, else conntrack (and thus a possible NAT mapping ...) gets zapped too in case conntrack table runs full. Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2018-12-21 00:48:38 +01:00
..
acpi	pci-v4.20-changes	2018-10-25 06:50:48 -07:00
asm-generic	s390 updates for 4.20-rc2	2018-11-09 06:30:44 -06:00
clocksource
crypto	KEYS: asym_tpm: extract key size & public key [ver #2]	2018-10-26 09:30:46 +01:00
drm	drm, i915, amdgpu, bridge + core quirk	2018-11-02 10:58:20 -07:00
dt-bindings	This time it looks like a quieter release cycle in the clk tree. I guess that's	2018-10-31 11:08:30 -07:00
keys	KEYS: Move trusted.h to include/keys [ver #2]	2018-10-26 09:30:47 +01:00
kvm
linux	netfilter: nat: remove nf_nat_l4proto struct	2018-12-17 23:33:31 +01:00
math-emu
media	media updates for v4.20-rc1	2018-10-31 10:53:29 -07:00
memory
misc
net	netfilter: conntrack: udp: only extend timeout to stream mode after 2s	2018-12-21 00:48:38 +01:00
pcmcia
ras
rdma	First merge window pull request	2018-10-26 07:38:19 -07:00
scsi
soc	ARM: SoC driver updates for 4.17	2018-10-29 15:16:01 -07:00
sound	ASoC: Updates for v5.0/v4.20	2018-10-22 23:26:37 +02:00
target
trace	Merge branch 'work.afs' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2018-11-01 19:58:52 -07:00
uapi	netfilter: remove NFC_* cache bits	2018-12-01 12:38:32 +01:00
video
xen	CONFIG_XEN_PV breaks xen_create_contiguous_region on ARM	2018-11-02 17:18:34 +01:00