saltstack/salt — pull request #17946 by akshimassar (2014-11-12 09:29:55+00:00)
Title: Fix match-set parsing

As for man iptables-extensions
```
[!] --match-set setname flag[,flag]...
```
match-set must have two arguments.