g1smd - 9:48 am on Jan 15, 2013 (gmt 0)

Conditions apply only to the next rule that follows.

You need the port test in some form or other ("is 443" or "is not 443") before every rule.

Add a blank line after each rule to make the code more readable.