Add support for negations in iptables rules, add more arguments.

Arguments are normalized to contain exactly one value before parsing.