add MAC filter
enable proc/sys/net/bridge/bridge-nf-call-iptables
avoid perl warning
split compile from apply

And renamed compile_and_start into apply_ruleset.
use --comment to store SHA1 signature
check chain name length (max 28 chars)