conntrack: config can be a list or a string, handle both