Conntrack turns a blind eye to dropped SYNs

https://blog.cloudflare.com/conntrack-turns-a-blind-eye-to-dropped-syns/