fw4: support sets with timeout capability but without default expiry

[project/firewall4.git] / root / usr / share / ucode / fw4.uc

diff --git a/root/usr/share/ucode/fw4.uc b/root/usr/share/ucode/fw4.uc
index 85456c9fde0005403433dedfa6aeb7f1242ba790..e6bd3652141f835763e18abf6932ff80aca23a89 100644 (file)
--- a/root/usr/share/ucode/fw4.uc
+++ b/root/usr/share/ucode/fw4.uc
@@ -3219,6 +3219,12 @@ return {
                        interval: interval
                };
 
+               if (s.interval)
+                       push(s.flags ??= [], 'interval');
+
+               if (s.timeout >= 0)
+                       push(s.flags ??= [], 'timeout');
+
                s.entries = filter(map(ipset.entry, (e) => {
                        let v = this.parse_ipsetentry(e, s);