Netfilter: Connection Tracking Issues

DoS: nmap, packet filter/route drops.
Established connections policy (TCP).
Fragments.

Network Address Translation...