1 2 3 4 5 6 7 8 9 10 11
table ip filter { ct timeout cttime { protocol tcp l3proto ip policy = { established : 2m3s, close : 12s } } chain c { ct timeout set "cttime" } }