Otherwise, the state match doesn't work, not allowing replies to outgoing packets to get in.
Original patch by Daniel Ehlers <danielehlers@mindeye.net>