Update to use modern rspec 2.14 syntax.

This updates from mocha .stubs to allow(x).to receive(x) syntax,
and tweaks the Gemfile/Rakefile too.
Handle the change to Puppet::Provider::Config in 3.4.
Merge pull request #275 from apenney/fix-rspec

Fix rspec on Puppet 3.4/rspec 2.14.
add ipsec policy matching

Conflicts:
	lib/puppet/provider/firewall/iptables.rb
	lib/puppet/type/firewall.rb
allow input chain in nat table
fix handling of builtin chains
Added host_to_mask method and added tests for it
Use host_to_mask so we can negate a mask. Also added documentation.

A custom provider should probably be aware that these kind of masks are possible.
Add test to see if type takes negative values
Added fixtures to test parsing negated addresses
Fix parsing negated values
Fix parsing of rules and generating the command line to set the rule
spec test fixtures should represent real use cases
Generic generating command line options for negated rules
Added a test case for /older/ alternative negation syntax
Use a more generic way for parsing negated options, not only for destination and source
fix negation handling for complex arguments
update specs to allow INPUT:nat:IPv4
Convert rspec-system tests to beaker-rspec.

This work migrates the existing tests to beaker-rspec.
Merge pull request #273 from apenney/add-beaker-tests

Convert rspec-system tests to beaker-rspec.