* Alexandr Nedvedicky <sashan@fastmail.net> [2026-05-11 22:57]:
>     so the expiration timer for address should be reset
>     every time there is a match on IP address/packet.
>     this is something what can be done.

that's a change in semantics, that needs a lot of care & thought.

-- 
Henning Brauer, hb@bsws.de, henning@openbsd.org
BS Web Services GmbH, http://bsws.de, Full-Service ISP
Secure Hosting, Mail and DNS. Virtual & Dedicated Servers, Root to Fully Managed
Henning Brauer Consulting, http://henningbrauer.com/