From a1885992ea1813525bc0a812f8de47f58024388d Mon Sep 17 00:00:00 2001 From: Harald Welte Date: Wed, 6 Oct 2004 12:32:54 +0000 Subject: add paragraph about raw table --- iptables.8.in | 10 ++++++++++ 1 file changed, 10 insertions(+) (limited to 'iptables.8.in') diff --git a/iptables.8.in b/iptables.8.in index d082c600..927e959c 100644 --- a/iptables.8.in +++ b/iptables.8.in @@ -127,6 +127,16 @@ Since kernel 2.4.18, three other built-in chains are also supported: (for altering packets being routed through the box), and .B POSTROUTING (for altering packets as they are about to go out). +.TP +.BR "raw" : +This table is used mainly for configuring exemptions from connection +tracking in combination with the NOTRACK target. It registers at the netfilter +hooks with higher priority and is thus called before ip_conntrack, or any other +IP tables. It provides the following built-in chains: +.B PREROUTING +(for packets arriving via any network interface) +.B OUTPUT +(for packets generated by local processes) .RE .SH OPTIONS The options that are recognized by -- cgit v1.2.3