cleanups - use better names
cleanup - avoid warning about undefined value
implement nf_conntrack_max option
add nf_conntrack_max to example config