Fixing exclude lookup against conntrack table