Update Snort binary to 2.9.5.5
Correctly add insert rules in ipfw with a _workaround_ for now which is a bit racy but will be fixed later on.
Correctly implement xtable for ip+mac address to be used on CP.

Also provide kernel side for an xtable only for mac addresses to be used from CP allowed macs.
Implementation will be finished later on since most of work is on userland and token side.
Prevent some cases to crash the kernel
Merge pull request #142 from bmeeks8/master

Update Snort binary to 2.9.5.5
Add NO_STAGE=yes so the port compiles correctly.
Merge pull request #144 from bmeeks8/master

Add NO_STAGE=yes so the port compiles correctly.
Merge remote-tracking branch 'upstream/master' into haswell-nics