Do some untested IPv6 header parsing.
A daemon mode.
Add a container_of macro rather than do it by hand.
Incorporate direction and flush out processing.

Track whether each processor is inbound or outbound, codify which
argument should be a LAN-port and which should be a WAN-port, and
fill out the remaining logic (simplified and corrected in places)
in brilter_pass.