allow space after : in config.txt; fix the icmp inbound-as-outbound hack (still not tested)