Add support for negations in iptables rules, add more arguments.

Arguments are normalized to contain exactly one value before parsing.
Prevent stealing of negation.
Merge pull request #13021 from zeezooz/iptables_parse_conf

Add support for negations in iptables rules, add more arguments.