On Tue, Mar 14, 2017 at 08:58:13PM +0100, Florian Westphal wrote: > +%cthelp1 type ct helper { type \"ftp\"\; protocol tcp\; };ok Just a minor syntax nitpick here. Protocol should be part of the same statement, right? ie. { type "ftp" protocol tcp ; } It fundamental to achieve a working configuration. You can send a follow up patch to amend this, no problem. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html