Clean up natfan and supporting functions.

Calculates the probabilities needed by the iptables statistics modules so
clients can just pass <ip>@<weight>.