(#171) Added ensure parameter to firewall class

This change adds the ensure parameter to the firewall class so that
the appropriate iptables service for the operating system can be
stopped. The reason for this change is to extend the class so that
it is not just limited to running the service.

The change to the manifests still made all the rspec tests pass,
so it should not introduce any regressions. More rspec tests were
also added to exercise the new code paths introduced.

This pull request fixes issue #171.
Add system tests for ensure parameter

Signed-off-by: Ken Barber <ken@bob.sh>
A patch for Debian 6 for enable => true has a bug

Signed-off-by: Ken Barber <ken@bob.sh>
Document ensure class parameter

Signed-off-by: Ken Barber <ken@bob.sh>
Merge pull request #173 from kbarber/171

Ensure parameter for firewall class