How to drop connections past conntrack, via iptables directly?

Question

iptables

Sobsno, subject. I want to understand how this is done.

Answer 1

drop in raw table

Answer 2

Alternatively, you can use -j CT --notrack for these packages in the raw table to disable conntrack processing for them, and then drop them anywhere you like, since not all mappings are available in the raw table.