Firewall: make DNAT only accessible from selected source network

We added RED to the standard networks and now portforwardings are only
useable from the selected source. If selected "all" the portforwarding
can be used from any internal network. Else the access is only grnated
from the selected source network.
fw-groups: cleanup checksubnets

Now the checksubnets function from general-functions.pl is used.
BUG10615 part1: Add connectionlimit to firewallgui
BUG10615 part2: Add ratelimit to firewallgui
BUG10615 part3: adapt rules.pl to use connectionlimit and ratelimit
BUG10615: fix wrong values in firewall.cgi
BUG10620: reload firewall.local in rules.pl, no longer in initscript
fw-groups: fix language strings
core83: reload init at update because glibc changes.
core83: set version to core83.
Merge branch 'master' into next
Create core update 84
core84: Add dnsmasq update
bash: Import upstream patches for CVE-2014-6271 and CVE-2014-7169
Merge remote-tracking branch 'amarx/firewall-dnat' into next

Conflicts:
	config/firewall/rules.pl
core84: Add changed files from the firewall-dnat branch
Merge remote-tracking branch 'amarx/fw-checksubnet' into next
core84: Add changed files from fw-checksubnet branch
Merge remote-tracking branch 'amarx/BUG10615' into next
Merge remote-tracking branch 'amarx/BUG10620' into next