Replace spoof_clientip and ACLs with netmapper

This is a simplified version of the original patch, to minimize
  the risk of the change.

Change-Id: Ib6988f9ce01df4307e0e53541da9bb1ae4f81645