Added rules that rewrite replies from the captive portal daemon to seem to
be coming from ports 80/tcp or 443/tcp as appropriate.

Signed-off-by: The Doctor <drwho@virtadpt.net>