From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on sa.local.altlinux.org X-Spam-Level: X-Spam-Status: No, score=-3.4 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,RP_MATCHES_RCVD autolearn=ham autolearn_force=no version=3.4.1 DKIM-Filter: OpenDKIM Filter v2.10.3 mail.taf.ru 04B1B121B47 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=taf.ru; s=ED51493A-8C5B-11EF-8C79-2E50F4456DF2; t=1744622588; bh=9QFljPFNB0q5tZYfEI/UFMu0uwYNj8jlalSuJv5qtzk=; h=Message-ID:Date:MIME-Version:To:From; b=IalEXmuQbg4qpf8bqdAo/U/NjLhmNBe+mftWD+VE8SmeY3jCiPT2u/cVwGaY+JBam UFwqe9gUkb84YOp316lHydnYy5yyS6FeMu//SH8VEmZOqI0p/sGQBYPgQnyArwFohw OuHUm7DXEI83ftMD/MkXxxPxFK5jznnnbJzmAAVq+FNZlK5YBDSB8Ne7c7mrSJV+Zp VQisJ4rXlleJPx0GyonI1U0Qiw3AxpUFX9JNZebGwfZGNXfYX8NovckK2W5P0PTmid n6KmA+SasvrR2htvJOCrGbuFvKH3CqPDG/Mpxy/28riz61inhPt/vSQ9IMSkGlSH1F 5UCgGaciyasXw== X-Virus-Scanned: amavis at taf.ru Message-ID: <8f3b2873-3231-4032-bce8-f4d7fd6be6b6@taf.ru> Date: Mon, 14 Apr 2025 17:23:07 +0800 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird To: sysadmins@lists.altlinux.org References: <202504141312.55698.a_s_y@sama.ru> Content-Language: ru From: Alexei Takaseev In-Reply-To: <202504141312.55698.a_s_y@sama.ru> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: quoted-printable Subject: Re: [Sysadmins] =?utf-8?q?p11_=D0=B8_nf=5Fconntrack=5Fhelper?= X-BeenThere: sysadmins@lists.altlinux.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: ALT Linux sysadmins' discussion List-Id: ALT Linux sysadmins' discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Apr 2025 09:23:14 -0000 Archived-At: List-Archive: 14.04.2025 17:12, Sergey =D0=BF=D0=B8=D1=88=D0=B5=D1=82: > =D0=9F=D1=80=D0=B8=D0=B2=D0=B5=D1=82=D1=81=D1=82=D0=B2=D1=83=D1=8E. > > =D0=90 =D0=BA=D1=82=D0=BE =D0=B7=D0=BD=D0=B0=D0=B5=D1=82, =D0=BA=D1=83=D0= =B4=D0=B0 nf_conntrack_helper =D0=BF=D1=80=D0=BE=D0=BF=D0=B0=D0=BB? > > p10: > > # sysctl -a | grep nf_conntrack_helper > # > > =D0=9D=D0=BE =D0=B5=D1=81=D0=BB=D0=B8 =D1=81=D0=B4=D0=B5=D0=BB=D0=B0=D1= =82=D1=8C, =D0=BD=D0=B0=D0=BF=D1=80=D0=B8=D0=BC=D0=B5=D1=80, modprobe nf_= conntrack_irc, =D1=82=D0=BE =D0=B1=D1=83=D0=B4=D0=B5=D1=82 > > # sysctl -a | grep nf_conntrack_helper > net.netfilter.nf_conntrack_helper =3D 0 > # > > C p11 =D1=82=D0=B0=D0=BA=D0=BE=D0=B5 =D0=BD=D0=B5 =D0=B2=D1=8B=D1=85=D0= =BE=D0=B4=D0=B8=D1=82: > > # modprobe nf_conntrack_irc > # sysctl -a | grep nf_conntrack_helper > # > > =D0=BF=D0=BE=D0=BA=D0=B0 =D0=BD=D0=B5 =D0=B7=D0=BD=D0=B0=D1=8E, =D0=BD=D0= =B0=D0=B4=D0=BE =D0=BB=D0=B8 =D1=82=D0=B5=D0=BF=D0=B5=D1=80=D1=8C, =D0=BD= =D0=BE =D1=80=D0=B0=D0=BD=D1=8C=D1=88=D0=B5 =D1=8F nf_conntrack_helper =D0= =B2 1 > =D0=B2=D1=8B=D1=81=D1=82=D0=B0=D0=B2=D0=BB=D1=8F=D0=BB =D0=BD=D0=B0 =D1= =88=D0=BB=D1=8E=D0=B7=D0=B5. =D0=9E=D1=82=D1=81=D1=83=D1=82=D1=81=D1=82=D0= =B2=D1=83=D0=B5=D1=82 =D0=B8 =D1=81 6.1.112, =D0=BA=D0=BE=D1=82=D0=BE=D1=80= =D0=BE=D0=B5 =D0=BE=D1=81=D0=B5=D0=BD=D1=8C=D1=8E =D0=B8=D0=B7 p11 > =D1=83=D0=B1=D1=80=D0=B0=D0=BB=D0=B8, =D0=B8 =D1=81 =D1=81=D0=BE=D0=B2=D1= =80=D0=B5=D0=BC=D0=B5=D0=BD=D0=BD=D1=8B=D0=BC 6.12.21. > > =D0=95=D1=81=D0=BB=D0=B8 =D0=BE=D1=82=D0=BA=D0=B0=D1=82=D0=B8=D1=82=D1=8C= =D1=8F=D0=B4=D1=80=D0=BE =D0=B4=D0=BE 5.10.235-std-def-alt1 =D0=B8=D0=B7= p10, > /proc/sys/net/netfilter/nf_conntrack_helper =D0=BF=D0=BE=D1=8F=D0=B2=D0= =BB=D1=8F=D0=B5=D1=82=D1=81=D1=8F. > =D0=9D=D0=B8=D0=BA=D1=82=D0=BE =D0=BD=D0=B5 =D0=B2 =D0=BA=D1=83=D1=80=D1= =81=D0=B5, =D1=87=D0=B5=D0=BC =D0=B3=D1=80=D0=BE=D0=B7=D0=B8=D1=82 =D0=B8= =D1=87=D1=82=D0=BE =D0=B4=D0=B5=D0=BB=D0=B0=D1=82=D1=8C? > =D0=90 =D0=B2=D1=81=D0=B5, =D0=B2=D1=8B=D0=BF=D0=B8=D0=BB=D0=B8=D0=BB=D0=B8= =D0=B2 =D1=80=D0=B0=D0=B9=D0=BE=D0=BD=D0=B5 5.15. =D0=92 nftables =D1=80=D0=B5=D1=88=D0=B0=D0=B5=D1=82=D1=81=D1=8F =D0=BF=D1= =80=D0=B8=D0=BC=D0=B5=D1=80=D0=BD=D0=BE =D1=82=D0=B0=D0=BA: table inet raw { =C2=A0=C2=A0=C2=A0ct helper pptp { =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0type "pptp" protocol tcp; =C2=A0=C2=A0=C2=A0} =C2=A0=C2=A0=C2=A0ct helper ftp { =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0type "ftp" protocol tcp; =C2=A0=C2=A0=C2=A0} =C2=A0=C2=A0=C2=A0ct helper sip { =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0type "sip" protocol udp; =C2=A0=C2=A0=C2=A0} =C2=A0=C2=A0=C2=A0chain PREROUTING { =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0type filter hook prerouting pr= iority -100; =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 tcp dport 1723 ct helper set "pptp" =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0tcp dport 21 =C2=A0=C2=A0ct he= lper set "ftp" =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0udp dport 5060 ct helper set "= sip" =C2=A0=C2=A0=C2=A0} }