- remove fsm, geolocate, p2ptbl, shuf
- update .config
- update paths (the package install into /usr/sbin instead of /sbin)

Otherwise N2N might be started after next boot independent of the
inetable state.

Otherwise the DHCP server allways serves X.X.0.2 - X.X.1.0

(via 2603713eb66680ccdb03e7409a5f2ec152534849)

Replace the last bits of hardcoded FFJ IP range outside /etc/config -
residing in fsm inetable state transitions - with IP ranges calculated
from /etc/config/cloud.

- add cronjob for splash_sync (every minute for debugging; to be
  increased)
- add redirection for unsplashed users in queen.enter, remove it in
  queen.leave
- add /etc/splash.sh to centralize functionality used in
  /sbin/splash_sync and /www/service/*splash*
- make splash_sync to use a transactional update approach: insert
  iptable rules for all splashed MACs into a new chain, then replace
  old and new chain; this avoids downtime even if splash_sync is slow
- remove allowed services for splashed users; this is intended to not
  move old cruft over to new code; if any of the those services shall
  be reenabled, it should happen in /etc/firewall.user
- make /sbin/splash_sync aware of the current state of FSM inetable
  (read via /sbin/fsm with optional command line override); this
  allows to unconditionally call splash_sync via cron
- add locks to all places where the splash state is touched
- remove multiple escaping/quoting/encoding problems in splash cgi
  scripts
- reenable link to the page the user initially demanded in
  /www/service/cgi-bin/splash_click

1. When in robinson state the router now resolves all domain names to
   an IP in the robinson fake net (as defined in
   /etc/config/cloud). All tcp traffic to this network (and the rest
   of the internet) is redirected to a local webserver.
2. The ip addresses in robinson state are now generated in the ranges
   given in /etc/config/cloud