Browse Source
Server made a connection to remote, remote replied with that connection. nf_conntrack module would not check reply-dst and reply-src by default. more information please refer to https://www.spinics.net/lists/netfilter/msg57842.html As a result, src and dst should be swapped to make nf_conntrack find the connection.pull/2590/head