소스 검색

feat(fw): add timeout to set elements

Set timeout to 2h to avoid polluting other CDN websites.

Signed-off-by: Tianling Shen <[email protected]>
Tianling Shen 3 주 전
부모
커밋
6f712bf71a
2개의 변경된 파일5개의 추가작업 그리고 3개의 파일을 삭제
  1. 1 1
      root/etc/init.d/unblockneteasemusic
  2. 4 2
      root/usr/share/unblockneteasemusic/nftables.ut

+ 1 - 1
root/etc/init.d/unblockneteasemusic

@@ -196,7 +196,7 @@ start_service() {
 		if [ -z "$FW4" ]; then
 			ipset create "acl_neteasemusic_http" hash:mac
 			ipset create "acl_neteasemusic_https" hash:mac
-			ipset create "neteasemusic" hash:ip
+			ipset create "neteasemusic" hash:ip timeout 7200
 		fi
 		config_foreach append_filter_client "acl_rule"
 

+ 4 - 2
root/usr/share/unblockneteasemusic/nftables.ut

@@ -22,7 +22,8 @@ set acl_neteasemusic_https {
 
 set neteasemusic {
 	type ipv4_addr;
-	flags interval;
+	flags interval, timeout;
+	timeout 2h;
 	auto-merge;
 
 	{% if (neteasemusic_addr): %}
@@ -32,7 +33,8 @@ set neteasemusic {
 
 set neteasemusic6 {
 	type ipv6_addr;
-	flags interval;
+	flags interval, timeout;
+	timeout 2h;
 	auto-merge;
 
 	{% if (neteasemusic_addr6): %}