Support iptables 1.4.14 (Fedora 18)

Modified the :state parameter to set '-m conntrack --ctstate', instead of
   obsolete '-m state --state'.