You should only use the ack-filter on egress, not ingress.

- Jonathan Morton