Am 20.12.22 um 20:34 schrieb ToddAndMargo:
On 12/20/22 11:31, Reindl Harald wrote:
Am 20.12.22 um 20:00 schrieb ToddAndMargo:
Hi All,
$ uname -r
6.0.12-300.fc37.x86_64
Since kernel 6.0.1,
/proc/sys/net/netfilter/nf_conntrack_helper
has been removed.
the deprecation warning dates back many years
Do you have a link to that? I could not
find one.
i read my syslogs / dmesg and that article is 9 years old:
https://gitlab.alpinelinux.org/alpine/awall/-/issues/1540
dmesg: nf_conntrack: automatic helper assignment is deprecated and it
will be removed soon. Use the iptables CT target to attach helpers instead
This breaks passive ftp.
What do you guys do to work around the problem
iptables-nft -t raw -A PREROUTING -p tcp --dport 21 -j CT --helper ftp
What is Jump to CT "-j CT"?
https://gitlab.alpinelinux.org/alpine/awall/-/issues/1540
