added keywords input and output to match(). If the interface is different than the match, src/dst and dports/sports are flipped. This allows exactly the same match statement to be given to both input and output interfaces, provides that the match states if it is designed for input or output.