Anyone have information on the new RAW table? The wiki is … well… sparse… I’m trying to modify my normal ruleset to utilize the speed of raw. Any information?
Particularly the question I currently have would be what would happen if I jump from a chain on the prerouting raw table to a chain on the filter table that uses more advanced features. E.g. could I filter on the raw table on protocol ICMP and then jump to a chain on filter table that uses the internal processing of the ICMP packet? Is that allowed?
I would think that you should just let everything fall through raw, except stuff that you explicitly want to handle statelessly.
In other words, if there’s an ICMP type that you want to handle statefully, then make sure no actions are taken on it in raw.
The standard packet flow will present the packet to the stateful filter table a little bit later on.