Show DNAT/SNAT --random only for valid protocols.
Remove icmp from MASQUERADE/REDIRECT proto list.
Add connlabel match.
Add counters support to the set match.
Add missing -g|--goto to first display of options.
Bump version to 1.0.