puppetlabs/puppetlabs-firewall — pull request #212 by nickstenning (2013-06-14 11:29:12+00:00)
Title: Add support for --src-type and --dst-type

Add support for filtering by source and destination address types. Supported by
iptables only, this feature allows filtering packets by the address type (such
as whether the packet came from a local address, a broadcast address, a
multicast address, etc).

Adds the `:address_type` feature to allow a provider to declare support for
filtering on the basis of address type.