Improve support for EL7 and other related fixes

* Support RHEL7 by removing firewalld before installing iptables-services
* Autorequire Package[iptables-services] for Firewall and Firewallchain types
* Ensure /etc/sysconfig/iptables exists before starting Service[iptables]

This is a combination of other pull requests

* #375
* #367
* #365

The changes in #391 would likely be a good addition to this.

I'm using this code in production for CentOS 6.5 and CentOS 7.0.1406.
Whoops, looks like these two changes made it in. (BTW, vagrant-wrapper is like a virus gem; once it is installed on your system it will ask to be added to every Gemfile ever.)