[Midnightbsd-cvs] src [8989] trunk/sys/netpfil/ipfw/ip_fw_dynamic.c: fix callout expiring dynamic rules in ipfw.

[laffer1 at midnightbsd.org]

Revision: 8989
          http://svnweb.midnightbsd.org/src/?rev=8989
Author:   laffer1
Date:     2016-09-29 21:25:41 -0400 (Thu, 29 Sep 2016)
Log Message:
-----------
fix callout expiring dynamic rules in ipfw.

Modified Paths:
--------------
    trunk/sys/netpfil/ipfw/ip_fw_dynamic.c

Modified: trunk/sys/netpfil/ipfw/ip_fw_dynamic.c
===================================================================
--- trunk/sys/netpfil/ipfw/ip_fw_dynamic.c	2016-09-30 01:25:17 UTC (rev 8988)
+++ trunk/sys/netpfil/ipfw/ip_fw_dynamic.c	2016-09-30 01:25:41 UTC (rev 8989)
@@ -982,8 +982,8 @@
 
 	chain = &V_layer3_chain;
 
-	/* Run keepalive checks every keepalive_interval iff ka is enabled */
-	if ((V_dyn_keepalive_last + V_dyn_keepalive_interval >= time_uptime) &&
+	/* Run keepalive checks every keepalive_period iff ka is enabled */
+	if ((V_dyn_keepalive_last + V_dyn_keepalive_period <= time_uptime) &&
 	    (V_dyn_keepalive != 0)) {
 		V_dyn_keepalive_last = time_uptime;
 		check_ka = 1;
@@ -1322,7 +1322,7 @@
         V_dyn_keepalive_interval = 20;
         V_dyn_keepalive_period = 5;
         V_dyn_keepalive = 1;    /* do send keepalives */
-	V_dyn_keepalive = time_uptime;
+	V_dyn_keepalive_last = time_uptime;
         
         V_dyn_max = 4096;       /* max # of dynamic rules */