1iptables-translate -A PREROUTING -t raw -j NOTRACK 2nft add rule ip raw PREROUTING counter notrack 3