Re: nf_conntrack_helper replacement?

[Reindl Harald <h.reindl@xxxxxxxxxxxxx>]

Am 20.12.22 um 20:00 schrieb ToddAndMargo:
> Hi All,
>
> $ uname -r
> 6.0.12-300.fc37.x86_64
>
> Since kernel 6.0.1,
>     /proc/sys/net/netfilter/nf_conntrack_helper
> has been removed.

the deprecation warning dates back many years

> This breaks passive ftp.
>
> What do you guys do to work around the problem
iptables-nft -t raw -A PREROUTING -p tcp --dport 21 -j CT --helper ftp