From ef928d7d14c75a8a3902b27c386e57dfbb53dc68 Mon Sep 17 00:00:00 2001 From: laforge Date: Wed, 6 Oct 2004 12:32:54 +0000 Subject: add paragraph about raw table --- iptables.8.in | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/iptables.8.in b/iptables.8.in index d082c60..927e959 100644 --- a/iptables.8.in +++ b/iptables.8.in @@ -127,6 +127,16 @@ Since kernel 2.4.18, three other built-in chains are also supported: (for altering packets being routed through the box), and .B POSTROUTING (for altering packets as they are about to go out). +.TP +.BR "raw" : +This table is used mainly for configuring exemptions from connection +tracking in combination with the NOTRACK target. It registers at the netfilter +hooks with higher priority and is thus called before ip_conntrack, or any other +IP tables. It provides the following built-in chains: +.B PREROUTING +(for packets arriving via any network interface) +.B OUTPUT +(for packets generated by local processes) .RE .SH OPTIONS The options that are recognized by -- cgit v1.2.3