Hi,

...

Please, extend libnetfilter_conntrack to support for this feature, there is a filter API that can be used for this purpose.

I will do that and post it here (or in the next version) once i am done.

A patch for this is now on netfilter-devel at [1].

[1]: https://marc.info/?l=netfilter-devel&m=170176886315385&w=2

Thanks