Refactor ICMP iptables chains
Refactor ICMP iptables chains

Puts outgoing icmp on it's own chain and moves some stray INPUT rules
over to the incoming-icmp chain.

thusoy/salt-states,thusoy/salt-states,thusoy/salt-states,thusoy/salt-states