On Thu, Jan 16, 2014 at 05:12:13PM +0100, Albert López wrote: > I read from a post in this mailing list (2003) that raw sockets > bypass the TCP/IP stack, so netfilter cannot manage/filter packets > generated by raw sockets. I would like to know if this behaviour is > still true. Yes. Phil -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html