From: Florian Westphal <fw@strlen.de>
To: toml <toml@thlu.de>
Cc: netfilter@vger.kernel.org
Subject: Re: Nftables + ALG + Linux 6.1.0-10-amd64 …?... is it a kown Problem?
Date: Tue, 1 Aug 2023 22:11:48 +0200 [thread overview]
Message-ID: <20230801201148.GB32288@breakpoint.cc> (raw)
In-Reply-To: <b47e1dc20a97eb4e6972d5cbfd2cf9dcaaab7e06.camel@mail>
toml <toml@thlu.de> wrote:
> Am Montag, dem 31.07.2023 um 15:36 +0200 schrieb Florian Westphal:
> > You need to assign the helper to use in your nftables ruleset.
> >
>
> > You might need to do this from output too if you need
> > this to work from the machine itself as well.
>
> That is my test rule. My Server is both, FTP-Server (Web-Cams) and FTP-
> Client for various uploads.
>
> If I understand correctly, incoming packets (as FTP-Server) will first
> activate the helper in prerouting. The input rules then allow the
> control channel port 21 and the helper the (related) data channel port
> n.
>
> For outgoing packets (as FTP-Client) first the helper is activated in
> the output chain, then port 21 is allowed again, the helper handles the
> related data channel.
>
> Have I understood this correctly?
Sounds about right, helper assignment looks correct to me.
next prev parent reply other threads:[~2023-08-01 20:11 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2023-07-31 7:57 Nftables + ALG + Linux 6.1.0-10-amd64 …?... is it a kown Problem? toml
2023-07-31 13:36 ` Florian Westphal
2023-08-01 14:20 ` toml
2023-08-01 20:11 ` Florian Westphal [this message]
2023-08-02 7:27 ` toml
2023-08-03 12:35 ` toml
2023-08-03 13:47 ` Florian Westphal
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20230801201148.GB32288@breakpoint.cc \
--to=fw@strlen.de \
--cc=netfilter@vger.kernel.org \
--cc=toml@thlu.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.