OSX ipfw based on Andy Fragen

I did go with the over engineered rule number generation of #340, it hides under the scenes and through causes at least (and most likely) two extra process calls, a failure to add a rule is going to cause more.

Added a few more fail2ban options that correspond to ipfw arguments rather than using static values.