Fix flow identification bug and use NF_REPEAT instead of NF_ACCEPT