CentOS did fix the iptables bug before the upstream EL distribution in their package release iptables-1.4.21-18.0.1.el7. It's mentioned here: https://wiki.centos.org/Manuals/ReleaseNotes/CentOS7 Maybe the fixed package can be ported to SL7.4?

Regards,
Ilari Stenroth