Support ICMP block inversion in zones

[ananace]

Since firewalld version 0.4.2 there's been support for inverting the ICMP block list in a zone, turning it from a blacklist into a whitelist instead.

I'd love to see a parameter to enable this feature in the firewalld_zone type.
An interim - naïve - solution is;

exec { 'Invert ICMP blocks in public':
  command => 'firewall-cmd --zone=public --add-icmp-block-inversion',
  unless  => 'firewall-cmd --zone=public --query-icmp-block-inversion',
  path    => [ '/bin', '/usr/bin', ],
}

[ananace]

Noticed that there's a PR #200 that solves this issue, so this will be done once that one's merged.

[tuxmaster5000]

Are there any news about the PR for it?

[jcpunk]

Reverted in #351 due to lack of skill on my end.

[jcpunk]

Tests fixed.

[tuxmaster5000]

Thanks for the work