I need kmod-nf-nathelper-extra in order to be able to use VPNs over gre (proto_gre), but this kernel module also loads other NAT helpers such as sip, which is vulnerable for the new slipstream attack (https://samy.pl/slipstream/). Would it be possible to somehow selectively load the proto_gre part of this package?
vi /etc/modules.d/nf-nathelper-extra
1 Like
This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.