generate chains for openvz venet

This is not fully functional, because we need to connect with uper level chains.
use parse_address_list to validate IP list