[Shorewall-users] nf_conntrack automatic helper assignment

[KP.Kirchdoerfer]

Hi all;

Things have changed recently... and I see the error:

nf_conntrack: default automatic helper assignment has been turned off for
security reasons and CT-based firewall rule not found. Use the iptables CT
target to attach helpers instead.

Is there an easy (aka shorewall) way to solve this issue?

Sorry if I have missed a discussion of this issue before.

kp

[Tom Eastep]

Post by KP.Kirchdoerfer
Hi all;
nf_conntrack: default automatic helper assignment has been turned off for
security reasons and CT-based firewall rule not found. Use the iptables CT
target to attach helpers instead.
Is there an easy (aka shorewall) way to solve this issue?
Sorry if I have missed a discussion of this issue before.

Hi KP,

Check out http://www.shorewall.org/Helpers.html.

-Tom

[KP.Kirchdoerfer]

Am Dienstag, 11. Juli 2017, 18:59:45 schrieb Benny Pedersen via Shorewall-

Post by KP.Kirchdoerfer
Is there an easy (aka shorewall) way to solve this issue?

provide shorewall version and iptable version could help us more to help
you :=)

of course :)

shorewall[6] 5.1.5
iptables: 1.4.21
kernel 4.9.36

i dont se this problem with gentoo here

kind regards kp