puppetlabs/puppetlabs-firewall — pull request #156 by georgkoester (2013-04-12 08:26:32+00:00)
Title: Add ipv6 fragmentation matchers and generify known_boolean handling.

Adds tests for ipv6, too.

ip6tables handles fragmentation differently. There's a special
module and a couple of matchers which are all needed to
implement a stateless firewall correctly.

known_boolean handling with etc has been generified.
The known_boolean functionality was partly tailored
to the :socket feature.