Security groups

This is the first prototype of security groups. It allows for filtering rules to be defined between interfaces. If an interfaces isn't in any security groups, all traffic will be accepted. This also included basic connection tracking features.

Rules follow this format:

    icmp:-1:10.0.0.0/24
    tcp:22:10.0.0.0/24
    udp:53:10.0.0.0/24