iptables API
Use cdn.debian.net mirror instead of the http.debian.net which regularly result in Hash mismatches on the package lists
Allow packages to populate /usr/include, though ignore them in git
Merge pull request #143 from Webconverger/iptables

iptables= API and build tweaks