Phil Sutter <phil@xxxxxx> wrote: > With nftables, no template is being used and instead helper assignment > happens after conntrack initialization. With helper auto assignment > being disabled by default, this leads to this spurious kernel log > suggesting to use iptables CT target. > > To avoid the bogus and confusing message, check helper's refcount: It is > initialized to 1 by nf_conntrack_helper_register() and incremented by > nf_conntrack_helper_try_module_get() during nft_ct_helper_obj_init(). So > if its value is larger than 1, it must be in use *somewhere*. Why not set cnet->auto_assign_helper_warned = true; from nft_ct.c?
