Add cbt protocol, to be able to mitigate some DDoS attacks
Merge pull request #388 from thias/cbt

Add cbt protocol, to be able to mitigate some DDoS attacks
(MODULES-450) Enable rule inversion

iptables has many rule arguments that may be inverted by prefixing with
an exclamation mark. This commit enables inversion for most every
property currently in the firewall provider that supports inversion by
prefixing the value with a bang+space.

Array elements must have all array elements prefixed with a bang+space
otherwise a warning will be raised, as it would look confusing to negate
a single value and then have iptables negate all of them.
Merge pull request #394 from hunner/fix_negate

(MODULES-450) Enable rule inversion
Remove stray print
Merge pull request #395 from hunner/remove_print

Remove stray print
Docs: Reference info added to firewall

Added reference information to the firewall module readme.
Docs: Reference information added to firewall module readme

I have added reference information to the firewall module readme. I also fixed errors introduced during squashing in my last commit.
Docs: code formatting edits on readme

Responding to comments from earlier PR to change formatting for some snippets of puppet code.
Merge pull request #397 from jbondpdx/firewall-readme

Firewall readme
Added support for statistic module
Added unit tests
Update docs, remove feature, and rename property
Merge pull request #400 from hunner/feature/statistic_module_support

Feature/statistic module support