#9 Use iptables-restore for faster startup

[Josh Mahonin]

This patches FireHOL to a version we're testing internally on embedded platforms. On a complex firewall, every call to iptables takes a non-trivial amount of time - on a Soekris board, loading the firewall can be in the range of 30-60s.

Instead of calling iptables for every rule, instead populate a list of chains, and use iptables-restore to load them all at once. Every rule is still documented and traceable for debug mode. Calls to 'touch' have also been replaced with '>', the builtin concat operation which also speeds up processing.

As well, add ability to match packets based on whether it is marked AND whether it is incoming or outgoing from an interface, via 'inmark' and 'outmark'.

[Josh Mahonin]