Originally Posted By: LittleBlueThing
Ensuring it comes after any 'accept' ports and 'established' should do what you want though.

Yup, that's where it is in the script here now, too.
Nice little improvement over the original, that is.

Cheers!