Finally, the packet filter gunk


New features:

anchor
sub-rules can be loaded by a program
in-line

table
radix-tree list of address/netmask
use almost anywhere you specify an address
can be manipulated from program

queue
bandwidth control
cut network bandwidth into a chunks
pass & block rules can specify a queue