`)

	testCases := []struct {
		nfacctEnsured  bool
		tcpLiberal     bool
		dropRule       string
		nfAcctCounters map[string]bool
	}{
		{
			nfacctEnsured:  false,
			tcpLiberal:     false,
			nfAcctCounters: map[string]bool{},
			dropRule:       "-A KUBE-FORWARD -m conntrack --ctstate INVALID -j DROP",
		},
		{
			nfacctEnsured: true,