Re: [CentOS] Default CentOS(Redhat) iptables, Secure?

Aleksandar Milivojevic wrote on Thu, 01 Dec 2005 00:05:48 -0600:

"Helper" option means that particular helper module marked the packet as related. In this case that module would be ip_conntrack_ftp indeed. Note that the option does not trigger loading of the module. It simply checks what placed packet into related state.

I see, thanks. With the ftp rules I use there's already a difference with and without conntrack_ftp being loaded. So, that looked sufficient. That module probably is what helps to identify the RELATED state, but as long as I don't specify the helper it could be any other (as long if I load others). I'll check if I can finetune them with "helper".

Kai