detect/firewall: fix last for progress handling

In last_for_progress handling set accept only on packet if it was also triggered on the last tx.

If there are more transactions, the accept can be set later (if policy allows).

src/detect.c

@@ -2372,7 +2372,7 @@ static void DetectRunTx(ThreadVars *tv,
 
                     /* if this is also the last fw rule we'll inspect we have to issue a default
                      * accept to the packet */
-                    if (s->app_progress_hook == tx.tx_progress) {
+                    if (last_tx && s->app_progress_hook == tx.tx_progress) {
                         DetectRunAppendDefaultAccept(det_ctx, p);
                     }
                 }