Just to confirm that NFT_OBJREF is still needed to be installed in order for helpers to work in nftables v0.8.5. /Darius On 30-04-2018 23:15, Florian Westphal wrote: > darius <dram@xxxxxxxxxxx> wrote: >> Thanks. I understood regarding standard helpers, that are compiled as >> nf_conntrack_xxx. They should work out of the box. I just wanted to >> check what is wrong and have rebuilt my system with nft_objref kernel >> module and now all of the sudden custom helpers started to work. Thanks >> for help! >> I am using nftables on OpenWRT/LEDE system and if you told that helpers >> shall work out of the box, then I suppose it is a bug in system >> configuration? Nft_objref shall be selected by default when selecting >> nftables isn't it? > Hmm, no. This sure seems to be a bug, > echo 1 > /proc/sys/net/netfilter/nf_conntrack_helper > > should be sufficient (nft based configuration is preferred however). > > I'll try to investigate and see if i can reproduce this. > > -- > To unsubscribe from this list: send the line "unsubscribe netfilter" in > the body of a message to majordomo@xxxxxxxxxxxxxxx > More majordomo info at http://vger.kernel.org/majordomo-info.html -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
