Hi Ben, Please, apply this commit: commit 3c5ab3f395d66a9e4e937fcfdf6ebc63894f028b Author: Julian Anastasov <ja@xxxxxx> Date: Sat Apr 29 20:33:09 2017 +0300 ipvs: SNAT packet replies only for NATed connections to stable 3.2.y. Julian also made a backport for you, that is available at Netfilter's patchwork: http://patchwork.ozlabs.org/patch/789259/ [ NOTE: This patch also applies to 3.4.y ] Thanks! -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html