Ahoj, Dňa Sat, 26 Apr 2025 11:24:47 +0200 Florian Westphal <fw@xxxxxxxxx> napísal: > You either have no conntrack active at all or you have another > notrack rule in output ("lo" is picked up in output, not prerouting). yes, you are right, i have opposite lo notrack in output chain and it seems, that for "lo" <=> "lo" traffic it is enough (tested). thanks -- Slavko https://www.slavino.sk