Added support for statistic module

puppetlabs-firewall was having issues parsing rules which utilized the iptables *statistic* module. This fixes that and adds support for 4 new params and includes validation:

- stat_mode
- stat_every
- stat_packet
- stat_prob

Original issue: https://tickets.puppetlabs.com/browse/MODULES-1138
Netfilter module doc: http://ipset.netfilter.org/iptables-extensions.man.html
we should probably make this list 1 per line.