Iptables - debug conn. types

You can debug failed connections by logging connection resets:

iptables -I INPUT -p tcp -m tcp --tcp-flags RST RST -j LOG

Great cheatsheet with examples
https://yurisk.info/2016/12/19/linux-ip-route-command-reference-by-example/index.html