Add listen-on and listen-on-v6 statements.

TODO: do something more sensible than "any" if one of the AFs doesn't
have an IP address assigned. Need to figure out how.