The current configuration only allows to configure one manip and overloads conntrack status flags with netlink semantic. Signed-off-by: Patrick Mchardy <[email protected]> Signed-off-by: David S. Miller <[email protected]>