ip_conntrack compatibility