 - Allow a list of SIDs to have a manually specified target (such as
   -j REJECT --reject-with tcp-reset).  The list should come from the
   command line with a new option and/or be read from a file.
 - Make use of the u32 module for complex match criteria.
