Hi Willy, Ben & Sasha, Please, apply this commit: commit 3c5ab3f395d66a9e4e937fcfdf6ebc63894f028b Author: Julian Anastasov <ja@xxxxxx> Date: Sat Apr 29 20:33:09 2017 +0300 ipvs: SNAT packet replies only for NATed connections to stable 3.2.y. Julian made a backport for you, that is available at Netfilter's patchwork: http://patchwork.ozlabs.org/patch/789258/ Thanks!