Default CentOS(Redhat) iptables, Secure?

[maillists at conactive.com (Kai Schaetzl)]

Aleksandar Milivojevic wrote on Thu, 01 Dec 2005 00:05:48 -0600:

> "Helper" option means that particular helper module marked the packet as 
> related.  In this case that module would be ip_conntrack_ftp indeed. 
> Note that the option does not trigger loading of the module.  It simply 
> checks what placed packet into related state.

I see, thanks. With the ftp rules I use there's already a difference with 
and without conntrack_ftp being loaded. So, that looked sufficient. That 
module probably is what helps to identify the RELATED state, but as long as 
I don't specify the helper it could be any other (as long if I load 
others). I'll check if I can finetune them with "helper".

Kai

-- 
Kai Sch?tzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com
IE-Center: http://ie5.de & http://msie.winware.org