Use .format() in `cef` logging function
Cosmetic fixes: doc, arrangement, columns wrap, ...
Split rule generation to separate function

Using a dedicated function prepares the ground for ipset and ipv6 support.
We also limit the rules that are created: clients can initiate connections
to servers, but not the other way around. The return packets are caught by
conntrack, and we only match the first packets of the connections.
Refactor LDAP ACL parsing
moar cosmetic
Authors update
IPSet support

If a destination is a simple CIDR, without port and protocol, then add it into
an ipset specific to the user. This ipset is looked up at the top of the user's
iptables custom chain.
Discard duplicated ACLs

If a destination CIDR is listed multiple times in LDAP, only use the first occurence.
Moar Code Prettyness
/me sucks at english
Merge pull request #1 from jvehent/ipset

Ipset support and cosmetic changes
Update IPset path for RHEL
Add list of groups to iptables comment