Fallback to accepting only NEW output public traffic if conntrack netlink isn't supported

internal/netlink/conntrack_unspecified.go

@@ -2,6 +2,10 @@
 
 package netlink
 
+import "errors"
+
+var ErrConntrackNetlinkNotSupported = errors.New("error not implemented")
+
 func (n *NetLink) FlushConntrack() error {
 	panic("not implemented")
 }