Conntrack and UDP Server = Dropouts.....

I have an OpenVPN server sitting behind the Mikrotik. The UDP port of the OpenVPN server is dst-nat through the Mikrotik.

When I connect to the OpenVPN, it connects fine, but it often disconnects fairly quickly.

This has to do something with the Mikrotik conn tracking.

This is strictly using UDP, not TCP.

I see the connection in the Mikrotik table, and it counts down to zero. At that point, it starts COUNTING UP… which I don’t think is correct… but I’m not sure. Shouldn’t it be deleted at zero?

Anyway, it doesn’t always break the connection but it often does. Should I try to bypass connection tracking for that situation?