Is there a way of clearing ip_conntrack table other then attempting to unload the module (almost always unsuccessfully)? I have a dual ISP setup using CONNMARK and iproute2, but when I have a script fail over the default gateway to the backup ISP, the entires in the ip_conntrack are still forwarding sessions to the wrong interface since they are marked in the conntrack. This continues until the timers expire in the table and they are flushed out. Is there anyway of clearing the table similar to pfctl -F state on BSD?
