Bug 10665

Summary: kernel: nf_conntrack: message on every boot
Product: IPFire Reporter: Daniel Weismüller <daniel.weismueller>
Component: ---Assignee: Michael Tremer <michael.tremer>
Status: CLOSED FIXED QA Contact:
Severity: - Unknown -    
Priority: - Unknown - CC: michael.tremer, tomvend
Version: 2   
Hardware: unspecified   
OS: Unspecified   
Bug Depends on: 10844, 10908    
Bug Blocks:    
Attachments: archive which include the modified files

Description Daniel Weismüller 2014-10-31 15:00:09 UTC 
On every boot the folowing kernel message apears.

"kernel:	nf_conntrack: automatic helper assignment is deprecated and it will be removed s oon. Use the iptables CT target to attach helpers instead."

Further informatios see here:
https://home.regit.org/netfilter-en/secure-use-of-helpers/
Comment 1 Michael Tremer 2015-04-22 18:13:04 UTC 
Could you please apply this to your machine and check if it is working alright?

http://git.ipfire.org/?p=people/ms/ipfire-2.x.git;a=commitdiff;h=b1109b8af5f0a5e3ab7f0b68211d63ab0594c0ac
Comment 2 Daniel Weismüller 2015-05-11 15:23:02 UTC 
After applying the patches there appears the following message in the kernel log.

kernel: 	xt_CT: No such helper "pptp"
Comment 3 Michael Tremer 2015-05-12 12:59:21 UTC 
Note to self: maybe decrease the SIP timeout to 1800 seconds or even less
Comment 4 Tom Rymes 2015-12-15 20:53:05 UTC 
FWIW, I am still seeing this behavior as of Core 95 today.

nf_conntrack: automatic helper assignment is deprecated and it will be removed soon. Use the iptables CT target to attach helpers instead.
Comment 5 Michael Tremer 2015-12-15 21:34:17 UTC 
This is indeed not fixed as there is no feedback.
Comment 6 Daniel Weismüller 2016-01-07 14:11:28 UTC 
Created attachment 397 [details]
archive which include the modified files

Please extract this archive to /

Following modified files are included:
/var/ipfire/langs/en.pl 
/srv/web/ipfire/cgi-bin/optionsfw.cgi 
/etc/rc.d/init.d/firewall 
/etc/modprobe.d/nf_conntrack.conf 

Please make a backup of the existing files before extracting the archive.
Comment 7 Daniel Weismüller 2016-01-07 14:32:33 UTC 
To configure take a look at 
https://ipfire:444/cgi-bin/optionsfw.cgi