Stop using "state" completely - "conntrack" seems more reliable.