iptables: do rule check only if version >= 1.4.11
nginx: define user based on OS
network: support Gentoo and CentOS

1. support Gentoo and CentOS
2. ipv6 exclude link-local ip