Support single or multiple dashes starting options.
Add ability to use ipset for blacklisting.

Required a lot of convoluted logic to fix odd cases, i.e. non-immediate
blacklisting and dumping to script. Could use a refactor.
Document the IPSet option for blacklisting.
Provide a startup file for saving firewall state with IPset support.