Blob Blame History Raw
From f7a31d5c3277b29f104fd8ff48df24c8bc790f19 Mon Sep 17 00:00:00 2001
From: Phil Sutter <>
Date: Wed, 24 Jun 2020 18:46:39 +0200
Subject: [PATCH] doc: Document notrack statement

Upstream Status: nftables commit f16fbe76f62dc

commit f16fbe76f62dcb9f7395d1837ad2d056463ba55f
Author: Phil Sutter <>
Date:   Mon Jun 22 15:07:40 2020 +0200

    doc: Document notrack statement

    Merely a stub, but better to mention it explicitly instead of having it
    appear in synproxy examples and letting users guess as to what it does.

    Signed-off-by: Phil Sutter <>
    Reviewed-by: Florian Westphal <>
 doc/statements.txt | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/doc/statements.txt b/doc/statements.txt
index 3b82436..749533a 100644
--- a/doc/statements.txt
+++ b/doc/statements.txt
@@ -262,6 +262,20 @@ table inet raw {
 ct event set new,related,destroy
+The notrack statement allows to disable connection tracking for certain
+Note that for this statement to be effective, it has to be applied to packets
+before a conntrack lookup happens. Therefore, it needs to sit in a chain with
+either prerouting or output hook and a hook priority of -300 or less.
+See SYNPROXY STATEMENT for an example usage.
 A meta statement sets the value of a meta expression. The existing meta fields