Address most of Jarno Rajahalme's comments

Still to be addressed:
  * Sockets in different namespaces
  * Configurable MAC addresses on decapsulated packets