{"record":{"id":"a16b0285221337b6","repo":"netbirdio/netbird","slug":"raw-table-not-available","errorCode":null,"errorMessage":"raw table not available","messagePattern":"raw table not available","errorType":"exception","errorClass":null,"httpStatus":null,"severity":"error","filePath":"client/firewall/iptables/manager_linux.go","lineNumber":555,"sourceCode":"//  2. Egress: Proxy -> WireGuard (via raw socket)\n//     src=127.0.0.1:fakePort -> dst=127.0.0.1:wgPort\n//     Matched by: dport=wgPort\n//\n//  3. Ingress: Packets to WireGuard\n//     dst=127.0.0.1:wgPort\n//     Matched by: dport=wgPort\n//\n//  4. Ingress: Packets to proxy (after eBPF rewrite)\n//     dst=127.0.0.1:proxyPort\n//     Matched by: dport=proxyPort\n//\n// Rules are cleaned up when the firewall manager is closed.\nfunc (m *Manager) SetupEBPFProxyNoTrack(proxyPort, wgPort uint16) error {\n\tm.mutex.Lock()\n\tdefer m.mutex.Unlock()\n\n\tif !m.rawSupported {\n\t\treturn fmt.Errorf(\"raw table not available\")\n\t}\n\n\twgPortStr := fmt.Sprintf(\"%d\", wgPort)\n\tproxyPortStr := fmt.Sprintf(\"%d\", proxyPort)\n\n\t// Egress rules: match outgoing loopback UDP packets\n\toutputRuleSport := []string{\"-o\", \"lo\", \"-s\", \"127.0.0.1\", \"-d\", \"127.0.0.1\", \"-p\", \"udp\", \"--sport\", wgPortStr, \"-j\", \"NOTRACK\"}\n\tif err := m.ipv4Client.AppendUnique(tableRaw, chainNameRaw, outputRuleSport...); err != nil {\n\t\treturn fmt.Errorf(\"add output sport notrack rule: %w\", err)\n\t}\n\n\toutputRuleDport := []string{\"-o\", \"lo\", \"-s\", \"127.0.0.1\", \"-d\", \"127.0.0.1\", \"-p\", \"udp\", \"--dport\", wgPortStr, \"-j\", \"NOTRACK\"}\n\tif err := m.ipv4Client.AppendUnique(tableRaw, chainNameRaw, outputRuleDport...); err != nil {\n\t\treturn fmt.Errorf(\"add output dport notrack rule: %w\", err)\n\t}\n\n\t// Ingress rules: match incoming loopback UDP packets\n\tpreroutingRuleWg := []string{\"-i\", \"lo\", \"-s\", \"127.0.0.1\", \"-d\", \"127.0.0.1\", \"-p\", \"udp\", \"--dport\", wgPortStr, \"-j\", \"NOTRACK\"}","sourceCodeStart":537,"sourceCodeEnd":573,"githubUrl":"https://github.com/netbirdio/netbird/blob/93e97f4bf1ad715072dcb3fb6cdb1763431b5a9c/client/firewall/iptables/manager_linux.go#L537-L573","documentation":"Error \"raw table not available\" thrown in netbirdio/netbird.","triggerScenarios":"Thrown at client/firewall/iptables/manager_linux.go:555 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":[],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"93e97f4bf1ad715072dcb3fb6cdb1763431b5a9c","analyzedAt":"2026-08-16T03:09:19.136Z","schemaVersion":2},"datasetVersion":"2026-08-16T08:17:34.114Z"}