TCP flags are valid on any type of rule, don't skip them on block or reject rules