Stefanie Leisestreichler <stefanie.leisestreichler@xxxxxxxxxxxxxx> wrote: > Thanks for your hint, Adel. > Enabling the helper modules with echo 1 > > /proc/sys/net/netfilter/nf_conntrack_helper did the trick, thank you very > much. > > I am not quite sure if this is just enabling the helpers and loose will be It enables auto-assignments of the helpers based on hard-coded numbers (e.g. tcp 21 in case of ftp). There are no other side effects. > at its default == 0 or if this is setting loose=1 implicit? No, tcp_loose is about mid-stream pickup (treating a connection as ESTABLISHED even if we did not see initial syn packet).