Extract some code for use with IPSec VPN later
chnroutes: Make it customizable by command line, also add acknowledgement
Use ipset to store China network list
Prepare iptables-based implementation for chnroutes