Thanks. I understood regarding standard helpers, that are compiled as nf_conntrack_xxx. They should work out of the box. I just wanted to check what is wrong and have rebuilt my system with nft_objref kernel module and now all of the sudden custom helpers started to work. Thanks for help! I am using nftables on OpenWRT/LEDE system and if you told that helpers shall work out of the box, then I suppose it is a bug in system configuration? Nft_objref shall be selected by default when selecting nftables isn't it? On 29-04-2018 11:10, Florian Westphal wrote: > darius <dram@xxxxxxxxxxx> wrote: >> modinfo nft_objref returns: >> >> cannot find module - nft_objref >> >> Is it mandatory for helpers to run? > No, as I said, echo 1 > /proc/sys/net/netfilter/nf_conntrack_helper > is enough to make helper work, you do not need rules in this case. > > You only need it if you want to use custom assignment > (or other stateful objects like counters, quota, etc). > > objref has nothing to do with helpers per se, its just the plumbing > nft uses for this. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
