The ack handling (loose) seem to have some undesired corner cases. Apart from that the problem with conntrack is not semantics but lack of understanding.

This blog post aims to narrow the gap and explain in clear language what you can and what you can not expect from the conntrack layer. Pros and cons.