netfilter: xt_conntrack: fix inverted conntrack direction test