我收到消息了
nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
内核是5.4.23,nftables版本是0.9.3。我如何为那个ct状态分配一个helper?
table ip filter {
chain input {
type filter hook input priority filter; policy accept;
ct state established,related accept
iif "lo" accept
}
chain forward {
type filter hook forward priority filter; policy accept;
}
chain output {
type filter hook output priority filter; policy accept;
}
}
1条答案
按热度按时间vd2z7a6w1#
我在CentOS 8上遇到了相同的错误。要解决它,请通过以下方式启用自动conntrack助手分配:
--编辑:根据@2072和@Gwyneth Llewelyn的以下评论,除非只是为了测试,否则不建议执行上述更改。相反,可以在此处找到适当的解决方案