add ipsec policy matching

Conflicts:
	lib/puppet/provider/firewall/iptables.rb
	lib/puppet/type/firewall.rb
Merge pull request #268 from phemmer/ipsec_support

add ipsec policy matching