Fix comments
Make sure a user can't circumvent the forced procotol
Recognize fail2ban service during restart
Move ICMP rules into the icmp protocol section
Properly handle default actions other than ACCEPT or DROP