use conntrack instead of state
https://bugs.launchpad.net/ufw/+bug/1065297