Fixed lib/puppet/type/firewall.rb and added notrack option. Also fixed spec/fixtures/iptables/conversion_hash.rb and corrected the expected chain return of OUTPUT (was output)