
This patch adds a new match called 'dstlimit'.  
The idea is to have something like 'limit', but either per 
destination-ip or per (destip,destport) tuple.

It gives you the ability to say 
	'1000 packets per second for every host in 192.168.0.0/16'
	'100 packets per second for every service of 192.168.1.1'

Parameters are:
	--dstlimit <rate>
		A rate just like the limit match
	--dstlimit-burst <num>
		Burst value, just like limit match
	--dstlimit-mode destip | destip-destport
		Limit per IP or per port
	--dstlimit-name foo
		The name for the /proc/net/ipt_dstlimit/foo entry
	--dstlimit-htable-size <num>
		The number of buckets of the hash table
	--dstlimit-htable-max <num>
		Maximum entries in the hash
	--dstlimit-htable-expire <num>
		After how many miliseconds do hash entries expire
	--dstlimit-htable-gcinterval <num>
		How many miliseconds between garbage collection intervals

