On Tue, Mar 14, 2017 at 08:58:07PM +0100, Florian Westphal wrote:
> This series adds the frontend/nft support to define and
> assign connection tracking helpers.
>
> Example:
>
> table inet myhelpers {
> ct helper ftp-standard {
> type "ftp"
> protocol tcp
> }
> chain prerouting {
> type filter hook prerouting priority 0;
> tcp dport 21 ct helper set "ftp-standard"
> }
> }
>
> A future extension could also allow to define/set knobs
> that can only be set via module parameters at this time,
> for instance the ftp 'loose mode' or the number of allowed expectations.
LGTM.
Acked-by: Pablo Neira Ayuso <[email protected]>
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to [email protected]
More majordomo info at http://vger.kernel.org/majordomo-info.html
