Add ipv6 fragmentation matchers and generify known_boolean handling.

Adds tests for ipv6, too.

ip6tables handles fragmentation differently. There's a special
module and a couple of matchers which are all needed to
implement a stateless firewall correctly.

known_boolean handling with etc has been generified.
The known_boolean functionality was partly tailored
to the :socket feature.
Add support for hop limit
Generate of options to parse in the correct order from @resource_map
fixed minor ruby1.9 incompatibility
ensure INPUT, OUTPUT and FORWARD firewallchain are not autorequired when table is :filter (to allow default drop policy at the end of rules)
Fix pre/post errors
Merge pull request #247 from edmundcraske/patch-1

Fix pre/post errors
Merge pull request #208 from georgkoester/hop_limit2

Add support for IPv6 hop limiting
Merge pull request #240 from doc75/dev_drop_policy

No firewallchain autorequire for INPUT, OUTPUT and FORWARD when table is :filter to enable DROP policy without blocking
added spec tests for iptables-save parser
Add Bundler byproducts to the list of ignored files.

I assume this commit is self-explanatory...
Remove redundant `include` call in system spec helper.

`rspec-system-puppet` helpers are already included few lines above the deleted
line, which by the way would have no effect anyway.
Merge pull request #252 from stefanozanella/update_gitignore

Add Bundler byproducts to the list of ignored files.
Merge pull request #253 from stefanozanella/spec_helper_fix

Remove redundant `include` call in system spec helper.
FM-103: Add metadata.json to all modules.
Merge pull request #255 from apenney/metadata

FM-103: Add metadata.json to all modules.
Support conntrack stateful firewall matching

Since Linux 3.7+ the "state" module has been removed from the kernel, leaving
only the "conntrack" module. This patch adds support for the conntrack module in
iptables by adding a new parameter to the firewall type, 'ctstate'.

Updates the README to demonstrate using the ctstate parameter instead of state
to nudge people to use it instead. This is safe as far as back to Linux kernel
2.6.18, so long as CONFIG_NF_CONNTRACK is enabled.
Merge pull request #257 from evaryont/master

Support conntrack stateful firewall matching
Merge pull request #248 from senax/generate-parser-list

Generate parser list
Merge branch 'master' of git://github.com/puppetlabs/puppetlabs-firewall

* 'master' of git://github.com/puppetlabs/puppetlabs-firewall: (95 commits)
  Support conntrack stateful firewall matching
  FM-103: Add metadata.json to all modules.
  Remove redundant `include` call in system spec helper.
  Add Bundler byproducts to the list of ignored files.
  added spec tests for iptables-save parser
  Fix pre/post errors
  Prepare 0.4.2 release.
  Add a .fixtures.yml so spec_helper can manage the tests.
  ensure INPUT, OUTPUT and FORWARD firewallchain are not autorequired when table is :filter (to allow default drop policy at the end of rules)
  Release a 0.4.1.
  Only  workaround if we're using the old package.
  22090 - Use list of RedHat OSes from newer facter.
  fixed minor ruby1.9 incompatibility
  Generate of options to parse in the correct order from @resource_map
  Release 0.4.0
  Add support for hop limit
  Add ipv6 fragmentation matchers and generify known_boolean handling.
  Add rspec-system tests for src_range/dst_range
  Add SL and SLC cases for operatingsystem
  Update providers to use expect syntax
  Remove travis testing puppet 2.6
  Add specs for dst_range and src_range params
  (#215) Add support for IP range
  (#215) Add support for IP range
  Exclude tests for Puppet < 3.2 against ruby-head
  Test against Puppet 3.2
  [#213] Run puppet-lint as part of CI
  [#213] Improve manifest documentation
  Minor fixes to appease puppet-lint
  Rename {source,destination}_type to {src,dst}_type
  Add support for --src-type and --dst-type
  [#200] Add tests for --limit-burst
  fix for default burst value of 5 fixes #200
  Fix minor test bug for latest puppet
  Release 0.3.1
  Update tests for rspec-system-puppet 2
  Fix #188: -f in comment leads to puppet resource firewall failing.
  Update rspec-system tests for rspec-system-puppet 1.5
  Ensure all services have 'hasstatus => true' for Puppet 2.6
  Fixed dumb logic error
  ...

Conflicts:
	lib/puppet/provider/firewall/iptables.rb
	lib/puppet/type/firewall.rb