This is a diff with not-working rules-save file and with one correctly working (AWall 0.3.1):

—- rules-save
+ /etc/iptables/rules-save
@@ –13,13 +13,13 @@
-A INPUT -p tcp -m multiport —dports 22,443 -j ACCEPT
-A INPUT -p udp -m multiport —dports 5060,5061 -j ACCEPT
-A INPUT -p tcp -m multiport —dports 5060,5061 -j ACCEPT
—A INPUT -m conntrack —ctstate RELATED —helper sip -j ACCEPT
+-A INPUT -m conntrack —ctstate RELATED -m helper —helper sip -j ACCEPT
-A INPUT -p udp —dport 161 -j ACCEPT
-A INPUT -p icmp -j icmp-routing
-A OUTPUT -m conntrack —ctstate ESTABLISHED -j ACCEPT
-A OUTPUT -o lo -j ACCEPT
-A OUTPUT -j ACCEPT
—A OUTPUT -m conntrack —ctstate RELATED —helper sip -j ACCEPT
+-A OUTPUT -m conntrack —ctstate RELATED -m helper —helper sip -j ACCEPT
-A OUTPUT -p icmp -j icmp-routing
-A icmp-routing -p icmp —icmp-type 3 -j ACCEPT
-A icmp-routing -p icmp —icmp-type 11 -j ACCEPT

(from redmine: issue id 2192, created on 2013-08-03, closed on 2013-10-31)

• Changesets:
  • Revision d5f28021 by Kaarle Ritvanen on 2013-08-15T08:06:05Z:

add missing '-m helper' to rules when required
fixes #2192