# Pastebin Tzjnny4H From my understanding and my expectation, 1st packet from VMB will be traveled as below: VMBàTRANSIENT_TABLEàEGRESS_BASE_TABLEàACCEPT_OR_INGRESS_TABLEàgo to switchàTRANSIENT_TABLEàFW_EGRESS_BASE_TABLEàFW_EGRESS_RULE àFW_ACCEPT_OR_INGRESS_TABLEàFW_BASE_INGRESS_TABLEàFW_INGRESS_RULE (1st packet will be dropped here). But actual flows of 1st packet as below: VMBàTRANSIENT_TABLEàEGRESS_BASE_TABLEàACCEPT_OR_INGRESS_TABLEàgo to switchàTRANSIENT_TABLEàFW_EGRESS_BASE_TABLEàFW_EGRESS_RULE àFW_ACCEPT_OR_INGRESS_TABLEàEGRESS_TABLEàVMA. Because conntrack state has been changed from *new-est* to *+est-rel+rpl*. I’m suspecting the cause of