Hello, Current conntrack --proto filter allow a single layer 4 protocol to be specified (se [1]). Could it be possible to either: - define a way to pass several protocols (meaning protocol1 OR protocol2) - define a accept several instances of --proto argument to be passed [1] https://manpages.debian.org/bullseye/conntrack/conntrack.8.en.html Best regards