Automatically add a level to netfilter rules which have a comment, but
not level set. The level is the highest (9999), thus the rules will be
always added at the end, together with commentless rules.
rebase
catch name resolution exception, as the module sometimes tries to
resolve random stuff ("tcp" in this case), and if it fails, it would
abort
Support for --dport AND --dports.
Note: no test support, examples not fixed!

:dport is now matching --dport (used to match -m multiport --dports)
:dports is now matching -m multiport --dports
Similar changes as previous commit, for sport and sports
iptables-saves output the -m tcp/udp so changing support for:
:sport, :dport original meaning with multiport
:{s,d}port_{udp,tcp} for -m tcp/udp
no support for :{s,d}port_sctp, but eventually, this should be added to
be consistant
i'm a noob. Forgot to update the resource list.
properly match "<number> msg" if any
support for addrtype
Resolved syntax problems. Resolved Issue #1
Update to .gitignore to ignore vim swap files
Fixes to make tests green. Issue #2
Added test to confirm proper amount of resource in instance when adding 3 rules
Update with testing framework for rules positioning and update to insert_order to honor rules without a table set
Updates to get the proper order of logging and log type. Tests to confirm that multicast is working correctly for addrtype
Update to add test for multiport source and destination
Update to description of rspec test
Added test for tcp multiports
Test for negation of tcp port
(GH-128) Change method_missing to define_method

Previously method_missing was enough to create dynamic methods but Puppet 3.0
broke that functionality. So here we used 'define_method' instead to work
around that.

Signed-off-by: Ken Barber <ken@bob.sh>