:PREROUTING,OUTPUT *raw -j NOTRACK;=;OK