iptables: Replace state module by conntrack module.