Subject: Re: b118509076b3 (probably) breaks my firewall

From: Florian Westphal <[email-masked]>
Date: Thu, 8 Sep 2022 21:19:25 +0200

Chris Clayton <[email-masked]> wrote:
> Just a heads up and a question...
> 
> I've pulled the latest and greatest from Linus' tree and built and installed the kernel. git describe gives
> v6.0-rc4-126-g26b1224903b3.
> 
> I find that my firewall is broken because /proc/sys/net/netfilter/nf_conntrack_helper no longer exists. It existed on an
> -rc4 kernel. Are changes like this supposed to be introduced at this stage of the -rc cycle?

The problem is that the default-autoassign (nf_conntrack_helper=1) has
side effects that most people are not aware of.

The bug that propmpted this toggle from getting axed was that the irc (dcc) helper allowed
a remote client to create a port forwarding to the local client.