Hm.. in kernel 6.0-rc7 Pablo Neira Ayuso (2): netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() netfilter: conntrack: remove nf_conntrack_helper documentation https://lwn.net/Articles/909391/ @Pablo Abeni Same with flowtable and without very slow connect vpn. now i back to old kernel 5.19.14 to make test and yes all is fine click on connect button and connection established for less that 5 sec m. > On 6 Oct 2022, at 15:46, Martin Zaharinov <micron10@xxxxxxxxx> wrote: > > Huh > Very strange in kernel 6.0.0 i not found : net.netfilter.nf_conntrack_helper > > > in old kernel 5.19.14 in sysctl -a | grep net.netfilter.nf_conntrack_helper > > net.netfilter.nf_conntrack_helper = 1 > > > m. > >> On 6 Oct 2022, at 14:18, Florian Westphal <fw@xxxxxxxxx> wrote: >> >> Martin Zaharinov <micron10@xxxxxxxxx> wrote: >>> Hi Team >>> >>> I make test image with kernel 6.0.0 and schem is : >>> >>> internet <> router NAT <> windows client pptp >>> >>> with l2tp all is fine and connections is establesh. >>> >>> But when try to make pptp connection stay on finish phase and not connect . >>> >>> try to remove module : nf_conntrack_pptp and same not work. >> >> Did you rely on >> sysctl net.netfilter.nf_conntrack_helper=1, or are you assigning the >> helper via ruleset? >