Add ipv6 frag matchers2 and generify known_boolean handling.

[georgkoester]

Adds tests for ipv6, too.

ip6tables handles fragmentation differently. There's a special
module and a couple 'frag' of matchers which are all needed to
implement a stateless firewall correctly.

known_boolean handling has been generified.
Before the known_boolean functionality was partly tailored
to the :socket feature.

(before #165).

[kbarber-jenkins-bot]

Can one of the admins verify this patch?

[georgkoester]

Looks like the new nokogiri version wants a newer ruby release on Travis. Make nokogiri version sticky for the older ruby versions?

[kbarber]

@georgkoester this test is failing due to a known issue with rspec-system 1.x and older rubies (nokogiri 1.6 suddenly dropped ruby 1.8.x support). The simplest solution is to rebase it and push again, it should fix it. You might also want to squash your patches up while you are at it.

[kbarber-jenkins-bot]

Can one of the admins verify this patch?

[apenney]

Hi,

I was wondering if this was still something you wanted to get merged in? I see Ken updated about a month ago to see if you could rebase it. No pressure from our side, just running through the PR list and thought I'd check in.

[georgkoester]

I think I rebased in c122f4d (above your comment). I will do it again.

[georgkoester]

Fails on Travis only. Failing code wasn't touched lately:

1. iptables chain provider detection should default to iptables provider if /sbin/(eb|ip|ip6)tables[-save] exists
   Failure/Error: exists.any_instance.stubs(:which).with("ebtables").
   NoMethodError:
   undefined method `any_instance_recorder_for' for nil:NilClass

   ./spec/unit/puppet/provider/iptables_chain_spec.rb:18

exists.any_instance.stubs(:which).with("iptables").
returns "/sbin/iptables"

2. iptables provider detection should default to iptables provider if /sbin/iptables[-save] exists
   Failure/Error: exists.any_instance.stubs(:which).with("iptables").
   NoMethodError:
   undefined method `any_instance_recorder_for' for nil:NilClass

   ./spec/unit/puppet/provider/iptables_spec.rb:18

exists.any_instance.stubs(:which).with("ebtables").
returns "/sbin/ebtables"

[georgkoester]

Travis is happy!

[hunner]

This looks cool and useful. rspec-system tests would be cool, but not required as there is not much coverage in the first place.

@kbarber thoughts?