CONFIG_IP_NF_FILTER
raw table support (required for NOTRACK/TRACE)
CONFIG_IP_NF_RAW
  This option adds a `raw' table to iptables. This table is the very
  first in the netfilter framework and hooks in at the PREROUTING
  and OUTPUT chains.

  If you want to compile it as a module, say M here and read
  <file:Documentation/modules.txt>.  If unsure, say `N'.

NOTRACK target support
CONFIG_IP_NF_TARGET_NOTRACK
  The NOTRACK target allows a select rule to specify
  which packets *not* to enter the conntrack/NAT
  subsystem with all the consequences (no ICMP error tracking,
  no protocol helpers for the selected packets).

  If you want to compile it as a module, say M here and read
  <file:Documentation/modules.txt>.  If unsure, say `N'.

raw table support (required for TRACE)
CONFIG_IP6_NF_RAW
  This option adds a `raw' table to ip6tables. This table is the very
  first in the netfilter framework and hooks in at the PREROUTING
  and OUTPUT chains.

  If you want to compile it as a module, say M here and read
  <file:Documentation/modules.txt>.  If unsure, say `N'.
