Re: nf_conntrack_helper replacement?

[ToddAndMargo <ToddAndMargo@xxxxxxxx>]

On 12/20/22 11:41, Reindl Harald wrote:
> Am 20.12.22 um 20:34 schrieb ToddAndMargo:
> > On 12/20/22 11:31, Reindl Harald wrote:
> > > Am 20.12.22 um 20:00 schrieb ToddAndMargo:
> > > > Hi All,
> > > >
> > > > $ uname -r
> > > > 6.0.12-300.fc37.x86_64
> > > >
> > > > Since kernel 6.0.1,
> > > >     /proc/sys/net/netfilter/nf_conntrack_helper
> > > > has been removed.
> > >
> > > the deprecation warning dates back many years
> >
> > Do you have a link to that?  I could not
> > find one.
>
> i read my syslogs / dmesg and that article is 9 years old: 
> https://gitlab.alpinelinux.org/alpine/awall/-/issues/1540
>
> dmesg: nf_conntrack: automatic helper assignment is deprecated and it 
> will be removed soon. Use the iptables CT target to attach helpers instead
>
> > > > This breaks passive ftp.
> > > >
> > > > What do you guys do to work around the problem
> > > iptables-nft -t raw -A PREROUTING -p tcp --dport 21 -j CT --helper ftp
> >
> > What is Jump to CT "-j CT"?
>
> https://gitlab.alpinelinux.org/alpine/awall/-/issues/1540



Thank you!