(#11093) Improve log_level property so it converts names to numbers

Previously the log_level property was constantly reloading due to the fact
that iptables was converting names to numbers. So unless you were using
numbers in your log_level setting, it was constantly telling you it needed
to be changed.

Now we convert the names to numbers in the munge so when comparing it will
always hopefully match.

Also, the default value when the jump value is 'LOG' is now set to 4 (warn)
based on iptables own defaults.
Merge branch 'ticket/11093-log_level'

* ticket/11093-log_level:
  (#11093) Improve log_level property so it converts names to numbers
(#10723) Munge hostnames and IPs to IPs with CIDR

Previously when hostnames were used in the source and destination properties
they were being converted to IP address by iptables. This meant that later
comparisons were failing because the property in code (a hostname) and the
'real' property returned by introspection (an ip address) were not matching.

This code using the munge facility will automatically detect and convert
hostnames to IP addresses in the type so the comparison works as expected.

The side-effect is that puppet does the hostname to IP conversion, not
iptables.
Merge branch 'ticket/10723-hosts_to_cidr'

* ticket/10723-hosts_to_cidr:
  (#10723) Munge hostnames and IPs to IPs with CIDR
(#10957) add iptables_version and ip6tables_version facts

These facts return the version of iptables or ip6tables by running --version
on the binary in question.
Merge branch 'ticket/10957-iptables-facts'

* ticket/10957-iptables-facts:
  (#10957) add iptables_version and ip6tables_version facts
(#11114) Release 0.0.4 - CHANGELOG.md and Modulefile update
Merge branch 'ticket/11114-release_0.0.4'

* ticket/11114-release_0.0.4:
  (#11114) Release 0.0.4 - CHANGELOG.md and Modulefile update
(maint) Updated CHANGELOG.md to use bullet points for Changes for v0.0.4
(#10984) Initial creation of class firewall

* Add Exec[firewall-persist] to save rules.  This allows the host to
  have iptables rules on reboot, before puppet runs.
* Debian hates you.  Add iptables init scripts for loading iptables at
  boot on releases of Debian that do not have them already.
* Add brains to the iptables/ip6tables providers to ensure kernel modules
  are loaded.
(#11334) Add support for MARK target and set-mark property.

This commit adds support for the set-mark iptables property and will validate
its use against the MARK jump target. This will also support handling decimal
or hexadecimal conversion where necessary.
Merge branch 'ticket/master/11334-MARK_support'

* ticket/master/11334-MARK_support:
  (#11334) Add support for MARK target and set-mark property.
(#11334) Fix broken call to super for ruby-1.9.2 in munge.
(#11443) simple fix of the error message for allowed values of the jump property

The condition on jump says its allowed accept, reject and drop. Update
the error message to say the same thing
Merge pull request #50 from grooverdan/ticket/11443_fix_error_message

(#11443) simple fix of the error message for allowed values of the jump property
Merge pull request #34 from mediatemple/class-firewall

Initial creation of class firewall for issue #10984
Revert "Merge pull request #34 from mediatemple/class-firewall"

This reverts commit bfbf01b08d6cf05795dd9b69815e8556e95dcf07, reversing
changes made to 0b55830db9447d0398b6b346bf513dfa6e2ccd08.

This patch breaks the build, and wasn't ready for merge. The rspec test
scaffolding wasn't prepared and hasn't been tested with this module properly.
(#11673) Adding OSPF(v3) protocol to puppetlabs-firewall

Added support for ospf to the proto property.
Merge branch 'ticket/master/11673_ospf'

* ticket/master/11673_ospf:
  (#11673) Adding OSPF(v3) protocol to puppetlabs-firewall
(#10165) Display multi-value: port, sport, dport and state command seperated

Previously the output that changed was munged when puppet was being ran, this
change provides a comma seperated output when the values change instead.