use pynetfilter_conntrack to delete existing conntrack
remove --mark
use conntrack exe to delete existing entry
remove lan_src/dst/unknown