WIP
Clean up natfan and supporting functions.

Calculates the probabilities needed by the iptables statistics modules so
clients can just pass <ip>@<weight>.
Fix various errors in argument passing.

Factor out command formatting, too.
Implemented removal of network entities.
Refactoring. Rename NAT to NATFan.

NATFans just need an IP, not a subnet.