diff --git a/src/debian/debian_ts_nftables.conf b/src/debian/debian_ts_nftables.conf
index fb377b1..46b3b0d 100644
--- a/src/debian/debian_ts_nftables.conf
+++ b/src/debian/debian_ts_nftables.conf
@@ -33,7 +33,7 @@ table inet router {
 
     chain forward {
         type filter hook forward priority filter; policy drop;
-        meta l4proto { tcp, udp } flow add @ft comment "defconf: track forwarded flows"
+        ct state established,related flow add @ft comment "defconf: track forwarded flows"
         ct state vmap { established : accept, related : accept } comment "defconf: handle forwarded flows"
         iifname "eth0" jump forward_lan comment "defconf: handle LAN IPv4 / IPv6 forward traffic"
         iifname "tailscale0" counter jump forward_tailscale comment "tsconf: handle TS IPv4 / IPv6 forward traffic"