[NETFILTER]: Drop conntrack reference when packet leaves IP