Fix NAT module
Use iptables' ‘-w’ flag

This prevents errors like "Another app is currently holding the
xtables lock" if the firewall and NAT services are starting in
parallel.  (Longer term, we should probably move to a single service
for managing the iptables rules.)
Fix tests broken due to the firewall being enabled by default
Include Archive::Cpio in the installation CD

http://hydra.nixos.org/build/10268978
Add c2hsc to haskell-packages.nix
maintainers: ertes: New temporary email address.
ugly tarball fix for llvmPackages support on Darwin
Merge pull request #2211 from ertes/ertes-new-mail

maintainers: ertes: New (temporary) email address.
Merge pull request #2207 from jwiegley/master

Add c2hsc to haskell-packages.nix
GHC version 7.8.1 has been deprecated because of a serious bug.
We'll have version 7.8.2 out soon.

http://www.haskell.org/pipermail/ghc-devs/2014-April/004605.html
http://www.haskell.org/pipermail/ghc-devs/2014-April/004616.html
haskell-parsers: add version 0.11
haskell-statistics: add version 0.11.0.0
haskell-active: update to version 0.1.0.12
haskell-cereal-conduit: update to version 0.7.2.1
haskell-dual-tree: update to version 0.2.0.2
haskell-hxt-unicode: update to version 9.0.2.2
haskell-hxt: update to version 9.3.1.4
haskell-monad-logger: update to version 0.3.6
haskell-monoid-extras: update to version 0.3.3.2
haskell-texmath: update to version 0.6.6.1