Changes since 1.4.1
1. Re-order steps in the 'check' command so that the policy file is
checked before the rules file.
2. Create an intermediate chain for input from zones defined in terms
of specific hosts or networks.