Search results

== ''notrack'' - Bypass connection tracking == ...ly skip connection tracking for matched packets. To be effective '''your ''notrack'' rule must come before conntrack is triggered'''. You can ensure this by a

...k at - or below - a priority level of '''raw''' is required. Otherwise, '''notrack''' will not be dealt with prior to the consultation of the conntrack table. ip protocol tcp ip daddr set 192.168.1.100 tcp dport set 10 notrack

tcp dport 8888 tcp flags syn notrack tcp dport 8888 tcp flags syn notrack

% nft add rule ip6 raw prerouting ip6 daddr fd00::1 ip6 daddr set fd00::2 notrack

* notrack support

* In addition, ''notrack'', ''ct helper set'' and ''ct event set'' affect conntrack and nftables ope ...d from conntrack. See [[Setting_packet_connection_tracking_metainformation|notrack]].