Bring documentation in line for condrestart
Update ChangeLog and NEWS for release
Fix non-detection of iptables error status

Problem was introduced in commit d3c134715275d07bc76131a6187903aca4ad3535
(Add an easy way to switch on bash debugging) where the status was saved
after showing the output, not before.
Update for release
Use FIREHOL_ESTABLISHED_ACTIVATION_ACCEPT

In non fast-activation mode and if set to 1 (the default), will emit
temporary rules to allow established traffic to continue even when
the activation policy is DENY. The temporary rules are deleted when
the firewall is complete.
Improve worst-case error handling

 - When the generated script fails but we don't know why
   we now leave the temporary files behind
 - Ensure execution happens in current shell context so we don't
   lose variables defined as part of the configuration

Conflicts:
	sbin/firehol.in
Use flock(1) instead of lockfile(1)

- Introduces a dependency on util-linux (rather than procmail)
- Exit immediately if we cannot create lockfile when using flock
Make FIREHOL_FAST_ACTIVATION environment-settable

Especially useful when running comparison tests