Srinivas Murthy wrote: > Sorry I installed, > iptables -t raw -A PREROUTING -p all -j NOTRACK You'll need this for locally generated packets: iptables -t raw -A INPUT -j NOTRACK But note that these only disable conntracking. You'll still see ipt_do_table(). If you want to stop iptables too then you'll need to unload the various iptables/conntrack/nat modules (there are lots of them). Even this doesn't quite remove it all: there are still netfilter hooks. If they aren't built as modules then I don't think there is a solution other than rebuilding the kernel. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html