Ipset + cosmetic

This pull request add support for IPSet. Instead of creating one rule per destination subnet, the subnets are inserted into a set which is looked up by iptables.

Also included: cosmetic changes, more documentation, 80 columns wraps and other goodies.