Question: iptables why use state new?
Answer: NEW means that the packet has started a new connection. It is handled by kernel modules called ip_conntrack_* that make your Firewall stateful. Stateful firewalls can watch traffic streams. If you just specify protocol and port number, your Firewall is not stateful but stateless.