Added HL target.
Added CLUSTERIP target.
--hashmode modes are shown and completed.
if the first target option is not --new, completion is refused afterwards.
Added LED target.
Added RATEEST target.
 --rateest-interval and --rateest-ewmalog units appended to the value are shown and completed.
Added TPROXY target. --on-port completes on services.
Added ULOG target. small optimization in _iptables_is_option().
Added u32 match.
Added ttl match.
Added tos match.
Added tcpmss match.
Added string match. --algo completes on strategy names.
Added statistic match. --mode completes with mode names.
Added rt match.
Added physdev match. Active interface names are completed.
Added osf match.
Added nfacct match. names are shown and completed.
Removed _iptables_get_cpuinfo(). Is now 'inline'.