1iptables-translate -A PREROUTING -t raw -j NOTRACK 2nft 'add rule ip raw PREROUTING counter notrack' 3