There were some users who complained of dropped connections when the firewall restarted with conntrack flushing enabled. It came to a head when
@Jack Yaz integrated AutoBW into spdMerlin with a qos restart potentially every 30-60 minutes (can't remember). Seemed like a simple solution at the time, but now we see how it impacts VPN clients.
So I'll have to revert to requiring a firewall restart when FlexQoS applies settings. Jack will probably want to do
service "restart_qos;restart_firewall"
regardless of whether FlexQoS is installed or not.
I would need to label that option "Do you want your VPN Client to work properly? o Yes o No".
Someone will need to be unhappy. The people who didn't like their connections dropping can disable Conntrack flushing but then be sad that their pre-existing traffic isn't reflecting correctly in the graphs. Or they can have accurate graphs and deal with connections dropping. spdMerlin users may have more frequent complaints if they also use FlexQoS w/ conntrack flushing. I'll work it out with Jack.