Hi Ben, Please, apply this commit: commit 3c5ab3f395d66a9e4e937fcfdf6ebc63894f028b Author: Julian Anastasov <ja@xxxxxx> Date: Sat Apr 29 20:33:09 2017 +0300 ipvs: SNAT packet replies only for NATed connections to stable 3.2.y. Julian also made a backport for you, that is available at Netfilter's patchwork: http://patchwork.ozlabs.org/patch/789259/ [ NOTE: This patch also applies to 3.4.y ] Thanks!