On Thu, Oct 06, 2022 at 03:46:37PM +0300, Martin Zaharinov wrote: > Huh > Very strange in kernel 6.0.0 i not found : net.netfilter.nf_conntrack_helper > > > in old kernel 5.19.14 in sysctl -a | grep net.netfilter.nf_conntrack_helper > > net.netfilter.nf_conntrack_helper = 1 Yes, default conntrack helper attachment was disabled 10 years ago, and this option was disabled 6 years ago by default. See: https://github.com/regit/secure-conntrack-helpers/blob/master/secure-conntrack-helpers.rst