Odi's astoundingly incomplete notes

Long story short for a client:

[0:0] -A OUTPUT -p tcp --dport 21 -j CT --helper ftp
[0:0] -A OUTPUT -p udp --dport 137:138 -j CT --helper netbios-ns

This will make work:

• active (non-passive) FTP
• browsing Windows network (SMB shares and domains)

Then you can safely set this sysctl to zero: net.netfilter.nf_conntrack_helper

posted on 2016-12-21 15:42 UTC in Code | 0 comments | permalink