action.d/ufw.conf: amend to #3018: parameter `kill-mode` extended with conntrack

config/action.d/ufw.conf

@@ -33,13 +33,14 @@ actionunban = if [ -n "<application>" ] && ufw app info "<application>"
               fi
 
 # Option: kill-mode
-# Notes.: can be set to ss (may be extended later with other modes) to immediately drop all connections from banned IP, default empty (no kill)
+# Notes.: can be set to ss or conntrack (may be extended later with other modes) to immediately drop all connections from banned IP, default empty (no kill)
 # Example: banaction = ufw[kill-mode=ss]
 kill-mode =
 
 # intern conditional parameter used to provide killing mode after ban:
 _kill_ =
 _kill_ss = ss -K dst "[<ip>]"
+_kill_conntrack = conntrack -D -s "<ip>"
 
 # Option: kill
 # Notes.: can be used to specify custom killing feature, by default depending on option kill-mode