Using conntrack module instead of state