diff --git a/config/action.d/ufw.conf b/config/action.d/ufw.conf
index 088a5a9d2..c9ff7f37f 100644
--- a/config/action.d/ufw.conf
+++ b/config/action.d/ufw.conf
@@ -33,13 +33,14 @@ actionunban = if [ -n "<application>" ] && ufw app info "<application>"
               fi
 
 # Option: kill-mode
-# Notes.: can be set to ss (may be extended later with other modes) to immediately drop all connections from banned IP, default empty (no kill)
+# Notes.: can be set to ss or conntrack (may be extended later with other modes) to immediately drop all connections from banned IP, default empty (no kill)
 # Example: banaction = ufw[kill-mode=ss]
 kill-mode =
 
 # intern conditional parameter used to provide killing mode after ban:
 _kill_ =
 _kill_ss = ss -K dst "[<ip>]"
+_kill_conntrack = conntrack -D -s "<ip>"
 
 # Option: kill
 # Notes.: can be used to specify custom killing feature, by default depending on option kill-mode