portblock: implement blocking of outgoing ports

Currently, the portblock agent can only operate on the INPUT chain.
Blocking our own host from sending traffic on a specific port is
presently not possible.

To enable this, introduce a "direction" parameter that specifies whether
to operate on incoming traffic (INPUT chain with destination ports) or
outgoing traffic (OUTPUT chain with source ports).