A good description of connection tracking in IPTables and how to use it