Factor out packet blocking logic.
map (uid, nid) --> blocked.
Policy contains mode enum not blocked bool now.
Add support for whitelist and blacklist modes.