Added comment.
Allow bridged network to be crosslink network
Allow crosslink together with virtual interface.
Ignore tcp 'established' when protecting interface
Exclude managed loopback interf. from network:[..]
No longer generate ACL if only permit ip any any

This optimization is only done for Cisco routers.
we get this single line ACLs from crosslink interfaces.
Prevent errors when reading unknown protocol.
Adapted to removed permit ip any any ACLs
Print never time stamps with option "quiet"
Fixed missing check for IP address of managed intf
Added tests with static routes.
Optimized second call to global optimization.

The second call is necessary to find redundant reverse rules.
Previously, the rule set was extended by reverse rules and compared
afterwards. Now, only the newly created reverse rules are compared to
other rules.

A test case has been added.
v3.042

 - Improved runtime to find and delete redundant reverse rules.
 - No ACL is added to crosslink interfaces of IOS routers which don't filter.
   Previously, an ACL with a single "permit ip any any" was generated.
 - Managed loopback interfaces are excluded from automatic group of networks.
 - Added support for 'managed = local_secondary'.
   This works similar to 'managed = secondary', but only inside a
   cluster of zones, connected by routers with 'managed=local' or
   'managed=local_secondary'. If a rule is already filtered by a
   router with 'managed=local', then a router with
   'managed=local_secondary' only checks for source network and
   destination network.
 - Added support for crosslinked routers with different filter strenght.
   If devices with different filter strenght are linked together by a
   crosslink network, then omit filter only at crosslink interface of
   weakest device.