Add ip_conntrack to the iptables init script to ensure that the connection