fix: allow established sessions to receive traffic