xml cleanup
Add a new useless chain ip iptables for state checking

This allows orwall to ensure iptables has been initialized properly at
boot time.

It also requests a reboot if init-script is enforced and the witness
chain is absent.
get a real bool for command output
New dialog

This one requests a reboot if a specific IPTables entry isn't found.
This also allow to ensure the init-script runs as expected.