only allow tcpflafgs and nosmurfs in host.fw
fix README
add README and example to debian package