Generate of options to parse in the correct order from @resource_map
fixed minor ruby1.9 incompatibility
added spec tests for iptables-save parser
Support conntrack stateful firewall matching

Since Linux 3.7+ the "state" module has been removed from the kernel, leaving
only the "conntrack" module. This patch adds support for the conntrack module in
iptables by adding a new parameter to the firewall type, 'ctstate'.

Updates the README to demonstrate using the ctstate parameter instead of state
to nudge people to use it instead. This is safe as far as back to Linux kernel
2.6.18, so long as CONFIG_NF_CONNTRACK is enabled.
Merge pull request #257 from evaryont/master

Support conntrack stateful firewall matching
Merge pull request #248 from senax/generate-parser-list

Generate parser list
Merge branch 'master' of https://github.com/puppetlabs/puppetlabs-firewall