Merge pull request #1201 from sarthurdev/T4178_2
firewall: T4178: Fix only inverse matching on tcp flags