Page MenuHomeVyOS Platform

Conntrack helpers should be disabled by default
Closed, InvalidPublicBUG

Description

For a fresh VyOS installation the following conntrack helpers are enabled by default:

conntrack {               
     modules {             
         ftp               
         h323              
         nfs               
         pptp 
         sip  
         sqlnet
         tftp  
     }         
 }

In order to follow the design of offloading options (default disabled) I think that also ct helpers should by default be disabled and that the admin must explicitly enable whatever helper they want to use.

Details

Version
VyOS 1.4-rolling-202308260020
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Bug (incorrect behavior)