Refactor firewall object

A firewall now configures directly a container, by executing
iptables in its namespace.
Add host_dir as a config option

When Adama is dockerized, the directory where to find the
/proc directory needs to be parametrized.
Don't run worker until firewall is ready