Is there any way in the firewall to enable / disable the contrack for certain interfaces?
Notrack action in raw table.