Include additional valid ctstate parameters.

When the ctstate parameter was added some additional avaliable conntrack states were not added at the same time. I've included them in the check - this gives added flexibility to the firewall module.