Hi Greg, Please, apply this commit: commit 3c5ab3f395d66a9e4e937fcfdf6ebc63894f028b Author: Julian Anastasov <ja@xxxxxx> Date: Sat Apr 29 20:33:09 2017 +0300 ipvs: SNAT packet replies only for NATed connections to stable 4.4.y. Julian made a backport for you, in case cherry-pick doesn't work, that is available at Netfilter's patchwork: http://patchwork.ozlabs.org/patch/789260/ Thanks! -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html