Add ipv6 fragmentation matchers and generify known_boolean handling.

Adds tests for ipv6, too.

ip6tables handles fragmentation differently. There's a special
module and a couple of matchers which are all needed to
implement a stateless firewall correctly.

known_boolean handling with etc has been generified.
The known_boolean functionality was partly tailored
to the :socket feature.
Add support for hop limit
Generate of options to parse in the correct order from @resource_map
fixed minor ruby1.9 incompatibility
ensure INPUT, OUTPUT and FORWARD firewallchain are not autorequired when table is :filter (to allow default drop policy at the end of rules)
Fix pre/post errors
Merge pull request #247 from edmundcraske/patch-1

Fix pre/post errors
Merge pull request #208 from georgkoester/hop_limit2

Add support for IPv6 hop limiting
Merge pull request #240 from doc75/dev_drop_policy

No firewallchain autorequire for INPUT, OUTPUT and FORWARD when table is :filter to enable DROP policy without blocking
added spec tests for iptables-save parser
Add Bundler byproducts to the list of ignored files.

I assume this commit is self-explanatory...
Remove redundant `include` call in system spec helper.

`rspec-system-puppet` helpers are already included few lines above the deleted
line, which by the way would have no effect anyway.
Merge pull request #252 from stefanozanella/update_gitignore

Add Bundler byproducts to the list of ignored files.
Merge pull request #253 from stefanozanella/spec_helper_fix

Remove redundant `include` call in system spec helper.
FM-103: Add metadata.json to all modules.
Merge pull request #255 from apenney/metadata

FM-103: Add metadata.json to all modules.
Support conntrack stateful firewall matching

Since Linux 3.7+ the "state" module has been removed from the kernel, leaving
only the "conntrack" module. This patch adds support for the conntrack module in
iptables by adding a new parameter to the firewall type, 'ctstate'.

Updates the README to demonstrate using the ctstate parameter instead of state
to nudge people to use it instead. This is safe as far as back to Linux kernel
2.6.18, so long as CONFIG_NF_CONNTRACK is enabled.
Merge pull request #257 from evaryont/master

Support conntrack stateful firewall matching
Merge pull request #248 from senax/generate-parser-list

Generate parser list
Update to use modern rspec 2.14 syntax.

This updates from mocha .stubs to allow(x).to receive(x) syntax,
and tweaks the Gemfile/Rakefile too.