puppetlabs/puppetlabs-firewall — pull request #240 by doc75 (2013-09-10 19:37:46+00:00)
Title: No firewallchain autorequire for INPUT, OUTPUT and FORWARD when table is :filter to enable DROP policy without blocking

This modification allows to disable autorequire of firewallchain only for the following:
INPUT:filter:...
OUTPUT:filter:...
FORWARD:filter:...

It allows to specify those firewallchains at the end of all firewall rules (in the my_fw::post for example) with a default DROP policy without blocking everything.