Modify

Opened 4 years ago

Closed 2 years ago

#13183 closed defect (not_a_bug)

nf_conntrack: automatic helper assignment is deprecated

Reported by: anonymous Owned by: developers
Priority: normal Milestone: Barrier Breaker 14.07
Component: base system Version: Trunk
Keywords: iptables ipt kern conntrack Cc:

Description

kern.info kernel: [ 6097.430000] nf_conntrack: automatic helper assignment is deprecated and it will be removed soon. Use the iptables CT target to attach helpers instead.

Attachments (0)

Change History (5)

comment:1 Changed 4 years ago by dani@…

this is present in r36006 too, it shows in log after a while of using the router.

comment:2 Changed 4 years ago by hnyman <hannu.nyman@…>

Those messages have been there since the jump to kernel 3.5+

The message is related to the changes made in May 2012, which enabled users shut down the traditional protocol helpers e.g. for ftp, irc, tftp etc.

From Openwrt perspective the message is a hint to developers that those old automatic protocol helpers will be removed at some point from Linux kernel & netfilter/iptables, and corresponding individual helpers might need to be configured.

https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=a9006892643a8f4e885b692de0708bcb35a7d530

netfilter: nf_ct_helper: allow to disable automatic helper assignment
This patch allows you to disable automatic conntrack helper lookup based on TCP/UDP ports, eg. echo 0 > /proc/sys/net/netfilter/nf_conntrack_helper [ Note: flows that already got a helper will keep using it even if automatic helper assignment has been disabled ] Once this behaviour has been disabled, you have to explicitly use the iptables CT target to attach helper to flows. There are good reasons to stop supporting automatic helper assignment, for further information, please read: http://www.netfilter.org/news.html#2012-04-03 This patch also adds one message to inform that automatic helper assignment is deprecated and it will be removed soon (this is spotted only once, with the first flow that gets a helper attached to make it as less annoying as possible).

https://home.regit.org/netfilter-en/secure-use-of-helpers/

comment:3 Changed 3 years ago by jow

  • Milestone changed from Attitude Adjustment 12.09 to Barrier Breaker 14.07

Milestone Attitude Adjustment 12.09 deleted

comment:4 Changed 3 years ago by anonymous

cpu usage rate high

comment:5 Changed 2 years ago by nbd

  • Resolution set to not_a_bug
  • Status changed from new to closed

those messages are harmless and can be ignored

Add Comment

Modify Ticket

Action
as closed .
The resolution will be deleted. Next status will be 'reopened'.
Author


E-mail address and user name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.