path: root/src/helpers/
diff options
authorJozsef Kadlecsik <>2012-05-15 14:31:35 +0200
committerPablo Neira Ayuso <>2012-08-01 19:20:12 +0200
commit969d93f14fffadb5cae67a7662484c1e064bbff1 (patch)
tree946ae010b4ee006bca59b99fd29b0b1c699c1fb8 /src/helpers/
parent5e8f64f46cb1dd71b0a94cb7dad87da00b8c5e32 (diff)
conntrackd: RPC helper added to cthelper
How to use this helper in a few steps: 1) You can enable this helper via: nfct helper add rpc inet tcp nfct helper add rpc inet udp 2) Configure /etc/conntrackd/conntrackd.conf and launch it. 3) You can test this helper locally with the following rule-set: iptables -A OUTPUT -t raw -p udp -m udp --dport 111 -j CT --helper rpc iptables -A OUTPUT -t raw -p tcp -m tcp --dport 111 -j CT --helper rpc iptables -A OUTPUT -p tcp -m state --state NEW,ESTABLISHED -m tcp --dport 111 -j ACCEPT iptables -A OUTPUT -p udp -m state --state NEW,ESTABLISHED -m udp --dport 111 -j ACCEPT iptables -A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT iptables -P OUTPUT DROP 4) Configure NFS and export some local directory. Then, mount it with version 3. mount.nfs -onfsvers=3 /mnt/ You should see permanent expectations created for this. Signed-off-by: Jozsef Kadlecsik <> Signed-off-by: Pablo Neira Ayuso <>
Diffstat (limited to 'src/helpers/')
1 files changed, 5 insertions, 2 deletions
diff --git a/src/helpers/ b/src/helpers/
index 2c9d63b..f441b29 100644
--- a/src/helpers/
+++ b/src/helpers/
@@ -1,9 +1,12 @@
include $(top_srcdir)/
+pkglib_LTLIBRARIES = \
ct_helper_ftp_la_SOURCES = ftp.c
ct_helper_ftp_la_LDFLAGS = -avoid-version -module $(LIBNETFILTER_CONNTRACK_LIBS)
+ct_helper_rpc_la_SOURCES = rpc.c
+ct_helper_rpc_la_LDFLAGS = -avoid-version -module $(LIBNETFILTER_CONNTRACK_LIBS)