(type) Fixed bug which arbitrarily limited which chains iniface and outiface parameters are set in rules, they are allowed in all chains
Add cbt protocol, to be able to mitigate some DDoS attacks
Merge pull request #388 from thias/cbt

Add cbt protocol, to be able to mitigate some DDoS attacks
(MODULES-450) Enable rule inversion

iptables has many rule arguments that may be inverted by prefixing with
an exclamation mark. This commit enables inversion for most every
property currently in the firewall provider that supports inversion by
prefixing the value with a bang+space.

Array elements must have all array elements prefixed with a bang+space
otherwise a warning will be raised, as it would look confusing to negate
a single value and then have iptables negate all of them.
Merge pull request #394 from hunner/fix_negate

(MODULES-450) Enable rule inversion
Remove stray print
Merge pull request #395 from hunner/remove_print

Remove stray print
Docs: Reference info added to firewall

Added reference information to the firewall module readme.
Docs: Reference information added to firewall module readme

I have added reference information to the firewall module readme. I also fixed errors introduced during squashing in my last commit.
Docs: code formatting edits on readme

Responding to comments from earlier PR to change formatting for some snippets of puppet code.
Merge pull request #397 from jbondpdx/firewall-readme

Firewall readme
Added support for statistic module
Added unit tests
Update docs, remove feature, and rename property
Merge pull request #400 from hunner/feature/statistic_module_support

Feature/statistic module support
Bugfix stat_prob -> stat_probability

I also aligned arrows and sorted the resource map
Merge pull request #402 from hunner/bugfix_statprob

Bugfix stat_prob -> stat_probability
Support netfilter-persistent for later versions

iptables-persistent 1.0 and later is now a plugin module for
netfilter-persistent and does not have its own init script or
service file.  Instead, the save action must be run on the
netfilter-persistent service.
Merge pull request #403 from rra/bug/iptables-persistent

Support netfilter-persistent for later versions
Merge pull request #374 from starstable/master

Fixed bug which arbitrarily limited iniface and outiface parameters