Changes since 1.4.0

1. Implement NONE policy.

2. Never create rules for <iface>:<subnet> to itself.

3. Always allow intrazone traffic.