Use -m conntrack instead of obsolete -m state by default