Comment Comment by ser_tyrion > they use raw sockets! Raw sockets are different than normal sockets: they bypass iptablesBut this bugreport says raw sockets would be filtered by the OUTPUT chain of iptables: https://bugzilla.redhat.com/show_bug.cgi?id=1269914#c4Is that accurate across distros? It does make sense for some socket types, like device sockets, to not be routed through iptables. parent ser_tyrion 6 years ago
But this bugreport says raw sockets would be filtered by the OUTPUT chain of iptables: https://bugzilla.redhat.com/show_bug.cgi?id=1269914#c4
Is that accurate across distros? It does make sense for some socket types, like device sockets, to not be routed through iptables.