Filter generates iptables rules in the raw table, not filter table, for an improved packet filtering performance