mt: update pfrule.sh, improve table handling

[msimerson]

Changes proposed in this pull request:

• mt: default NTPd is now openntpd
• mt: install pfrule from GH repo (vs inline)
  • add mt6-fetch, get_jail_data
• pfrule.sh:
  • adds a -n option
  • adds binat loading support
  • loads tables in pf.conf.d
  • unload is smarter now
• host: ntpd stop -> onestop
• base: fix jail config so service jail start base works

Fixes #600

Checklist:

• docs up-to-date

[msimerson]

This also adds a -n option to pfrule.sh, which does a preview showing exactly the commands that would be run.

unload

./pfrule.sh unload -n
pfctl -a nat/dovecot -F nat
pfctl -a rdr/dovecot -F nat
pfctl -a filter/dovecot -F rules
pfctl -t dovecot -T flush
pfctl -t insecure_mua -T flush

load

./pfrule.sh load -n
pfctl -t dovecot -T replace -f /data/dovecot/etc/pf.conf.d/dovecot.table
pfctl -t insecure_mua -T replace -f /data/dovecot/etc/pf.conf.d/insecure_mua.table
pfctl -a nat/dovecot -f /data/dovecot/etc/pf.conf.d/nat.conf
pfctl -a rdr/dovecot -f /data/dovecot/etc/pf.conf.d/rdr.conf
pfctl -a filter/dovecot -f /data/dovecot/etc/pf.conf.d/filter.conf