Kmod-nf-nathelper-extra: Selectively load modules

I need kmod-nf-nathelper-extra in order to be able to use VPNs over gre (proto_gre), but this kernel module also loads other NAT helpers such as sip, which is vulnerable for the new slipstream attack (https://samy.pl/slipstream/). Would it be possible to somehow selectively load the proto_gre part of this package?

vi /etc/modules.d/nf-nathelper-extra
1 Like