firewall: Fix firewall policy table if only RED, GREEN + BLUE are present.
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
firewall: rules.pl: Don't reload custom firewall rules here.
firewall: Sort order in which chains are initialized.

This has been some real trouble because multiple rules could
not be properly inserted into the rule chains in the kernel
because the chains did not exist, yet.
red: change mac address of nas0 device.

Traverse Technology has reported that ppp over atm-bridge is not working
because there is a bogus mac address at the virtual nas0 device.
firewall: Allow access to the entire GREEN/BLUE/ORANGE subnets.

This includes the firewall itself as well.
firewall: Make sure that only packets that go through the tunnel are passing OVPNBLOCK.
openvpnctrl: Allow ICMP error messages to pass the transfer net.
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next