Actually, may I be seeing just another incarnation of http://www.spinics.net/lists/netfilter-devel/msg31134.html? If so, applying https://lkml.org/lkml/2014/3/27/294 seems appropriate. Could anybody please confirm this? Mihai