re-introduce the "strictness" from v0.5.*

[myrdd]

version 0.5 had a "strictness" option, which should be implemented in 1.0.

Strictness means: In default-deny mode you can select between these sub-modes:

• Base domain (like *.google.com)
• Host (www.google.com)
• full address (http://www.google.com:80)

Another possibility would be if there were three options:

• switch between base domain and full domain
• switch protocol (e.g. http) on/off
  • sub-option: allow http <--> https
• switch port on/off

see also #473

[myrdd]

ideas in issue #344 should also be considered.

[SkySkimmer]

#299 seems relevant too.