Hello
Im looking for a firewalld equivalent of iptables option "-m state
--state ESTABLISHED,RELATED". I use firewalld 0.9.3 on a RHEL8.7 with
nftables backend. nftables support conntrack state (like "ct state {
established, related }") but i dont find this in firewalld rich rules
documentation. Documentation talk about helpers associate to services
but i just dont understand how it work.
If i accept some INPUT connexion on a specific port and want to allow
tcp response on OUTPUT (ie with established or related state), can you
confirm me i need to bypass firewalld and add directly a nft rules on
the right chain ?
Thank you, Gilian.
