Changes since 1.4.0
1. Implement NONE policy.
2. Never create rules for <iface>:<subnet> to itself.
3. Always allow intrazone traffic.
4. Correct building of ECN interface list under ash.
