Fixes this warning when using recent iptables: WARNING: The state match is obsolete. Use conntrack instead. ref #1497