Support for detached container

[kennyparsons]

I know you said it needs to run in the foreground, but here's an idea I wondered if you could implement:

Require the container to run in host mode so that the container can edit the host's iptables. Then to allow for "on-off" proxying, create a simple apache web server in the container with a simple on-off switch. When set to off, it removes the iptable rules. When set to on, it adds the rules. This would allow us to just run the container and leave it permanently for our projects.