Add support for policing to FW filter

Alow setting rate policing to FW filter. this is in essence acting
like::

    tc filter replace dev eth1 parent 1: protocol ip prio 1 \
        handle 0x2 fw flowid 1:2 police \
        rate 850000bit burst 1599b action drop

+pep8 fixed