Improve support for EL7 and other related fixes

* Support RHEL7 by removing firewalld before installing iptables-services
* Autorequire Package[iptables-services] for Firewall and Firewallchain types
* Ensure /etc/sysconfig/iptables exists before starting Service[iptables]

This is a combination of other pull requests

* #375
* #367
* #365

The changes in #391 would likely be a good addition to this.

I'm using this code in production for CentOS 6.5 and CentOS 7.0.1406.
I think this unit test should be updated to show that the `Package['iptables-services']` is in the catalog because that will catch the fact that `$::operatingsystemrelease == 'Rawhide'` support was accidentally missed.