Hi, This the first of a set of patches. Actually this patch is a resend, I think that it got lost. Actually, we don't need to write lock the conntrack table because we always call alter_reply with a non-confirmed conntrack. regards, Pablo