fix multiport rules and add icmp type names

Multiport module needs --dports/--sports (instead of --dport/--sport).
Also, a single port Range does not require --multiport.

Also added the ability to use icmp type name as 'dport' when proto is icmp.
add a way to define some default chains
add some useful chains

Those chains implement basically the same rules as related shorewall action.