Updates from Debian/Ubuntu

Via Tomas Jacik <tomas.jacik@sunfox.cz>
    - set proper chmod
    - added ipv6 regex while searching for RESERVED adresses
    - fixed msn port
    - added OpenVPN port
    - added Nagios NRPE daemon port
    - added wait for interface feature
    - added default firehol setting probing for debian based systems
    - added wizzard support wlan
Handle 2-digit kernel versions correctly
Disable automatic startup

As applied to Redhat/Fedora packages since Oct 2008
Cleanup top-level organisation

Move admin scripts to their own directory
Move rpm-building to a subdirectory and get it working, using the current
Fedora .spec as the basis
Remove .cvs file and TODO/What's new docs
Merge branch 'redhat-patches'
Merge branch 'fix-kernel-3.0'
Merge branch 'reorganise'
Import debian init script

Make the init script export WAIT_FOR_IFACE if it was set, rather than
reading the /etc/default/firehol file in the main script.
Update to latest reserved IP address space

Also, remove the time warning for RESERVED_IPS. Since all IPv4 space now
allocated and the remaining reserved space will presumably remain so.
Add further command alternatives for other systems

With the following additional choices, firehol can be made to run
on an openwrt system:
  awk if gawk is not available
  insmod if modprobe is not available
  nothing if renice is not available
Use functions in place of direct iptables commands

Preparation for manipulating both ipv4 and ipv6 tables at
the same time.

Replace:
  iptables-restore with iptables_restore_cmd
  ${IPTABLES_SAVE_CMD} with iptables_save_cmd
  ${IPTABLES_RESTORE_CMD} with iptables_restore_cmd
Package as sanewall

Create a build directory for all packaging work.
Switch to debian changelog format and extract version numbers when building.
Create a .tar.gz package
Package .deb files, mostly based upon the pre-existing firehol debian package.
Update .rpm packaging
Install scripts as sanewall under debian

Conflict and replace firehol
Take over existing firehol configuration
Mass rename to sanewall
Bring README up to date for sanewall

Add new, separate install guide.

Note that URLs are still subject to change.

Remove debian-specific readmes: include generally-useful information in
the top-level README/INSTALL.

Output rpm build in same directory as the .deb and .tar.gz
Build the man-pages for commands from source

Using asciidoc a2x(1) command.

Remove the pre-built versions from source control.
Update descriptions slighlty
Add a Conflicts: firehol directive to the RPM
Improve installation

 - Verify on Ubuntu 12.04, FC16
 - Fix errors in README
 - Improve instructions in INSTALL
 - Tidy up some comments in sanewall script
Change activation policy for FORWARD chain TO DROP

Close the gap where a "router all accept" will allow connections established
in the setup window to continue afterwards by preventing routed traffic
during the activation.

By leaving the policy intact for INPUT and OUTPUT, there is no chance of
interfering with a remote connection being used to update the firewall.

Existing connections will have packets dropped during the activation period
but TCP connections should recover once the setup is finished.

Does nothing to address "client all accept" on a host, which should not
really be used on an internet-facing server unless you change the other
policies in the configuration as a minimum.