First attempt on the policy match. Is not clean yet.
Especially as it has the --proto option, which overlaps with the main option.
Handling of the policy match is now more reliable.
Fixed a bug in _iptables_last_is(), where check for options was not performed.
Added more debugging output.
Display either long or short form of help option,
at the first option request on matches and targets.