fix 'common syn' rules

we need to check all flags on tcp packets to make sure syn is the ONLY
flag set, not just check syn only to see if it is set.