--- a/modules/firewall/CHANGELOG.md	Sat Jan 04 11:42:45 2020 +0000
+++ b/modules/firewall/CHANGELOG.md	Sun Jan 26 11:36:07 2020 +0000
@@ -1,9 +1,289 @@
-##2015-05-19 - Supported Release 1.6.0
-###Summary
+# Change log
+
+All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/) and this project adheres to [Semantic Versioning](http://semver.org).
+
+## [v2.2.0](https://github.com/puppetlabs/puppetlabs-firewall/tree/v2.2.0) (2019-12-09)
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-firewall/compare/v2.1.0...v2.2.0)
+
+### Added
+
+- Add support for Debian Unstable [\#876](https://github.com/puppetlabs/puppetlabs-firewall/pull/876) ([martialblog](https://github.com/martialblog))
+- \(FM-8673\) - Support added for CentOS 8 [\#873](https://github.com/puppetlabs/puppetlabs-firewall/pull/873) ([david22swan](https://github.com/david22swan))
+- FM-8400 - add debian10 support [\#862](https://github.com/puppetlabs/puppetlabs-firewall/pull/862) ([lionce](https://github.com/lionce))
+- FM-8219 - Convert to litmus [\#855](https://github.com/puppetlabs/puppetlabs-firewall/pull/855) ([lionce](https://github.com/lionce))
+
+### Fixed
+
+- Change - Avoid puppet failures on windows nodes [\#874](https://github.com/puppetlabs/puppetlabs-firewall/pull/874) ([blackknight36](https://github.com/blackknight36))
+- Fix parsing iptables rules with hyphen in comments [\#861](https://github.com/puppetlabs/puppetlabs-firewall/pull/861) ([Hexta](https://github.com/Hexta))
+
+## [v2.1.0](https://github.com/puppetlabs/puppetlabs-firewall/tree/v2.1.0) (2019-09-24)
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-firewall/compare/v2.0.0...v2.1.0)
+
+### Added
+
+- \(MODULES-6136\) Add zone property of CT target. [\#852](https://github.com/puppetlabs/puppetlabs-firewall/pull/852) ([rwf14f](https://github.com/rwf14f))
+- \(FM-8025\) Add RedHat 8 support [\#847](https://github.com/puppetlabs/puppetlabs-firewall/pull/847) ([eimlav](https://github.com/eimlav))
+
+### Fixed
+
+- MODULES-9801 - fix negated physdev [\#858](https://github.com/puppetlabs/puppetlabs-firewall/pull/858) ([lionce](https://github.com/lionce))
+
+## [v2.0.0](https://github.com/puppetlabs/puppetlabs-firewall/tree/v2.0.0) (2019-05-14)
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-firewall/compare/1.15.3...v2.0.0)
+
+### Changed
+
+- pdksync - \(MODULES-8444\) - Raise lower Puppet bound [\#841](https://github.com/puppetlabs/puppetlabs-firewall/pull/841) ([david22swan](https://github.com/david22swan))
+
+### Added
+
+- \(FM-7903\) - Implement Puppet Strings [\#838](https://github.com/puppetlabs/puppetlabs-firewall/pull/838) ([david22swan](https://github.com/david22swan))
+
+### Fixed
+
+- \(MODULES-8736\) IPtables support on RHEL8 [\#824](https://github.com/puppetlabs/puppetlabs-firewall/pull/824) ([EmilienM](https://github.com/EmilienM))
+
+## [1.15.3](https://github.com/puppetlabs/puppetlabs-firewall/tree/1.15.3) (2019-04-04)
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-firewall/compare/1.15.2...1.15.3)
+
+### Fixed
+
+- \(MODULES-8855\) Move ipvs test to exception spec [\#834](https://github.com/puppetlabs/puppetlabs-firewall/pull/834) ([eimlav](https://github.com/eimlav))
+- \(MODULES-8842\) Fix ipvs not idempotent [\#833](https://github.com/puppetlabs/puppetlabs-firewall/pull/833) ([eimlav](https://github.com/eimlav))
+
+## [1.15.2](https://github.com/puppetlabs/puppetlabs-firewall/tree/1.15.2) (2019-03-26)
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-firewall/compare/1.15.1...1.15.2)
+
+### Fixed
+
+- \(MODULES-8615\) Fix rules with ipvs not parsing [\#828](https://github.com/puppetlabs/puppetlabs-firewall/pull/828) ([eimlav](https://github.com/eimlav))
+- \(MODULES-7333\) - Change hashing method from MD5 to SHA256 [\#827](https://github.com/puppetlabs/puppetlabs-firewall/pull/827) ([david22swan](https://github.com/david22swan))
+- \(MODULES-6547\) Fix existing rules with --dport not parsing [\#826](https://github.com/puppetlabs/puppetlabs-firewall/pull/826) ([eimlav](https://github.com/eimlav))
+- \(MODULES-8648\) - Fix for failures on SLES 11 [\#816](https://github.com/puppetlabs/puppetlabs-firewall/pull/816) ([david22swan](https://github.com/david22swan))
+- \(MODULES-8584\) Handle multiple escaped quotes in comments properly [\#815](https://github.com/puppetlabs/puppetlabs-firewall/pull/815) ([mateusz-gozdek-sociomantic](https://github.com/mateusz-gozdek-sociomantic))
+- External control for iptables-persistent [\#795](https://github.com/puppetlabs/puppetlabs-firewall/pull/795) ([identw](https://github.com/identw))
+
+## [1.15.1](https://github.com/puppetlabs/puppetlabs-firewall/tree/1.15.1) (2019-02-01)
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-firewall/compare/1.15.0...1.15.1)
+
+### Fixed
+
+- \(DOC-3056\) Remove mention of rules ordering [\#809](https://github.com/puppetlabs/puppetlabs-firewall/pull/809) ([clairecadman](https://github.com/clairecadman))
+- \(FM-7712\) - Remove Gentoo 1.0 testing/support for Firewall module [\#808](https://github.com/puppetlabs/puppetlabs-firewall/pull/808) ([david22swan](https://github.com/david22swan))
+- \(MODULES-8360\) Fix IPv6 bug relating to Bugzilla 1015 [\#804](https://github.com/puppetlabs/puppetlabs-firewall/pull/804) ([alexharv074](https://github.com/alexharv074))
+
+## [1.15.0](https://github.com/puppetlabs/puppetlabs-firewall/tree/1.15.0) (2019-01-18)
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-firewall/compare/1.14.0...1.15.0)
+
+### Added
+
+- \(MODULES-8143\) - Add SLES 15 support [\#798](https://github.com/puppetlabs/puppetlabs-firewall/pull/798) ([eimlav](https://github.com/eimlav))
+- Add nftables wrapper support for RHEL8 [\#794](https://github.com/puppetlabs/puppetlabs-firewall/pull/794) ([mwhahaha](https://github.com/mwhahaha))
+- Changed regex for iniface and outiface to allow '@' in interface names [\#791](https://github.com/puppetlabs/puppetlabs-firewall/pull/791) ([GeorgeCox](https://github.com/GeorgeCox))
+- \(MODULES-8214\) Handle src\_type and dst\_type as array [\#790](https://github.com/puppetlabs/puppetlabs-firewall/pull/790) ([mateusz-gozdek-sociomantic](https://github.com/mateusz-gozdek-sociomantic))
+- \(MODULES-7990\) Merge multiple comments into one while parsing rules [\#789](https://github.com/puppetlabs/puppetlabs-firewall/pull/789) ([mateusz-gozdek-sociomantic](https://github.com/mateusz-gozdek-sociomantic))
+- add -g flag handling in ip6tables.rb provider [\#788](https://github.com/puppetlabs/puppetlabs-firewall/pull/788) ([cestith](https://github.com/cestith))
+- \(MODULES-7681\) Add support for bytecode property [\#771](https://github.com/puppetlabs/puppetlabs-firewall/pull/771) ([baurmatt](https://github.com/baurmatt))
+
+### Fixed
+
+- pdksync - \(FM-7655\) Fix rubygems-update for ruby \< 2.3 [\#801](https://github.com/puppetlabs/puppetlabs-firewall/pull/801) ([tphoney](https://github.com/tphoney))
+- \(MODULES-6340\) - Address failure when name begins with 9XXX [\#796](https://github.com/puppetlabs/puppetlabs-firewall/pull/796) ([eimlav](https://github.com/eimlav))
+- Amazon linux 2 changed its major version to 2 with the last update... [\#793](https://github.com/puppetlabs/puppetlabs-firewall/pull/793) ([erik-frontify](https://github.com/erik-frontify))
+
+## [1.14.0](https://github.com/puppetlabs/puppetlabs-firewall/tree/1.14.0) (2018-09-27)
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-firewall/compare/1.13.0...1.14.0)
+
+### Added
+
+- pdksync - \(MODULES-6805\) metadata.json shows support for puppet 6 [\#782](https://github.com/puppetlabs/puppetlabs-firewall/pull/782) ([tphoney](https://github.com/tphoney))
+- \(FM-7399\) - Prepare for changelog generator [\#780](https://github.com/puppetlabs/puppetlabs-firewall/pull/780) ([pmcmaw](https://github.com/pmcmaw))
+
+## 1.13.0
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-firewall/compare/1.12.0...1.13.0)
+
+### Added
+
+- pdksync - \(MODULES-7705\) - Bumping stdlib dependency from \< 5.0.0 to \< 6.0.0 [\#775](https://github.com/puppetlabs/puppetlabs-firewall/pull/775) ([pmcmaw](https://github.com/pmcmaw))
+- Add support for Amazon Linux 2 [\#768](https://github.com/puppetlabs/puppetlabs-firewall/pull/768) ([erik-frontify](https://github.com/erik-frontify))
+- \(FM-7232\) - Update firewall to support Ubuntu 18.04 [\#767](https://github.com/puppetlabs/puppetlabs-firewall/pull/767) ([david22swan](https://github.com/david22swan))
+- \[FM-7044\] Addition of Debian 9 support to firewall [\#765](https://github.com/puppetlabs/puppetlabs-firewall/pull/765) ([david22swan](https://github.com/david22swan))
+- \[FM-6961\] Removal of unsupported OS from firewall [\#764](https://github.com/puppetlabs/puppetlabs-firewall/pull/764) ([david22swan](https://github.com/david22swan))
+
+### Fixed
+
+- \(MODULES-7627\) - Update README Limitations section [\#769](https://github.com/puppetlabs/puppetlabs-firewall/pull/769) ([eimlav](https://github.com/eimlav))
+- Corrections to readme [\#766](https://github.com/puppetlabs/puppetlabs-firewall/pull/766) ([alexharv074](https://github.com/alexharv074))
+- \(MODULES-6129\) negated option with address mask bugfix [\#756](https://github.com/puppetlabs/puppetlabs-firewall/pull/756) ([mirekys](https://github.com/mirekys))
+- \(MODULES-2119\) iptables delete -p all exception [\#749](https://github.com/puppetlabs/puppetlabs-firewall/pull/749) ([mikkergimenez](https://github.com/mikkergimenez))
+
+## 1.12.0
+### Summary
+This release uses the PDK convert functionality which in return makes the module PDK compliant. It also includes a roll up of maintenance changes.
+
+#### Added
+- PDK convert firewall ([MODULES-6455](https://tickets.puppet.com/browse/MODULES-6455)).
+- Modulesync updates.
+
+### Fixed
+- Set correct `seluser` for CentOS/RHEL 5.x ([MODULES-6092](https://tickets.puppet.com/browse/MODULES-6092)).
+- Fix error parsing rules with dashes in the chain name ([MODULES-6261](https://tickets.puppet.com/browse/MODULES-6261)).
+- Changes to address additional Rubocop failures.
+- (maint) Addressing puppet-lint doc warnings.
+
+## Supported Release 1.11.0
+### Summary
+This release is to implement Rubocop changes within the module.
+
+#### Added
+- Rubocop has been implemented in the module.
+
+### Changed
+- Module sync was updated.
+- Unparsable rules are now skipped with a warning.
+
+## Supported Release 1.10.0
+### Summary
+This is a clean release prior to the module being run through rubocop.
+
+#### Added
+- Hashlimit module added.
+- Firewall multi notes added.
+- Gidd lookup now added.
+- Simple sanity check added to hash parser rule.
+
+### Changed
+- Version requirement has been updated.
+- An array is no lnger accepted for icmp types.
+- UNTRACKED is now considered to be a valid state.
+- Modulesync updates.
+- ip6tables can be disabled.
+- Readme format has been fixed.
+- Fixes made to accomodate Puppet lint.
+- Fix to regex i 'connlimit_spec.rb' and 'firewall_spec.rb'.
+- General test fixes.
+- Negated match sets know properly dealt with.
+- Correct IP version for hostname resolution now chosen.
+- Unmanaged rule regex regarding iptable has been fixed.
+
+### Removed
+- Ubuntu 10.04 and 12.04 removed.
+
+## Supported Release 1.9.0
+### Summary
+This release includes several bugfixes and NFLOG support.
+
+#### Added
+- Support for NFLOG including the `NFLOG` jump target and four commandline options ([FM-4896](https://tickets.puppetlabs.com/browse/FM-4896))
+- Support for the geoip module ([MODULES-4279](https://tickets.puppetlabs.com/browse/MODULES-4279))
+- Management of the ebtables package
+
+#### Fixed
+- iptables parser fails with "Invalid address from IPAddr.new: -m" ([MODULES-4234](https://tickets.puppetlabs.com/browse/MODULES-4234))
+- selinux context for iptables configuration
+- Replace Puppet.version.to_f with Puppet::Util::Package.versioncmp ( [MODULES-4528](https://tickets.puppetlabs.com/browse/MODULES-4528))
+
+## Supported Release 1.8.2
+### Summary
+This release includes numerous features and bugfixes, See below.
+
+#### Bugfixes
+- Fixing issue with double quotes being removed when part of the rule comment
+- Add the --wait flag to the insert/update/delete iptables actions to prevent failures from occuring when iptables is running outside of puppet for iptables >= 1.4.20
+- Fix iptables_version and ip6tables_version facts not returning the version
+
+#### Features
+- Support for multiple IP sets in a single rule
+- Implement queue_bypass and queue_num parameters for NFQUEUE jump target
+- Tighten SELinux permissions on persistent files
+- RHEL7 SELinux support for puppet 3
+- Manage ip6tables service for Redhat Family
+
+## Supported Release 1.8.1
+### Summary
+This release documents an important issue with mcollective that may impact users of the firewall module. Workarounds are suggested as part of this advisory until mcollective can be patched.
+
+#### Bugfixes
+- Add mcollective rule-reversal known limitation
+
+## Supported Release 1.8.0
+### Summary
+
+This release includes numerous features, bugfixes and other improvements including better handling when trying to delete already absent rules.
+
+#### Features
+- Added new 'pkg_ensure' parameter to allow the updating of the iptables package.
+- Added new 'log_uid' property.
+- Added 'sctp' to the 'proto' property.
+- Added support for IPv6 NAT in Linux kernels >= 3.7.
+- Added support for the security table.
+
+#### Bugfixes
+- (MODULES-2783) Replaced hardcoded iptables service references with $service_name variable.
+- (MODULES-1341) Recover when deleting absent rules.
+- (MODULES-3032) Facter flush is called to clear Facter cache get up to date value for ':iptables_persistent_version'.
+- (MODULES-2159) Fixed idempotency issue when using connlimit.
+- Fixed the handling of chain names that contain '-f'.
+
+#### Improvements
+- Numerous unit and acceptance test improvements.
+- Improved handling/use of the '$::iptables_persistent_version' custom fact.
+- Better handling of operating systems that use SELinux.
+
+## Supported Release 1.7.2
+### Summary
+
+Small release for support of newer PE versions. This increments the version of PE in the metadata.json file.
+
+## 2015-08-25 - Supported Release 1.7.1
+### Summary
+
+This is a bugfix release to deprecate the port parameter. Using the unspecific 'port' parameter can lead to firewall rules that are unexpectedly too lax. It is recommended to always use the specific dport and sport parameters to avoid this ambiguity.
+
+#### Bugfixes
+- Deprecate the port parameter
+
+## 2015-07-28 - Supported Release 1.7.0
+### Summary
+
+This release includes numerous features, bugfixes and other improvements including Puppet 4 & PE 2015.2 support as well as ClusterIP and DSCP jump target support.
+
+#### Features
+- Puppet 4 and PE 2015.2 official support
+- ClusterIP jump target (including options) now supported
+- DSCP jump target (including options) now supported
+- SLES 10 now compatible (but not supported)
+
+#### Bugfixes
+- (MODULES-1967) Parse escape sequences from iptables
+- (MODULES-1592) Allow src_type and dst_type prefixed with '!' to pass validation
+- (MODULES-2186) - iptables rules with -A in comment now supported
+- (MODULES-1976) Revise rule name validation for ruby 1.9
+- Fix installation hang on Debian Jessie
+- Fix for physdev idempotency on EL5
+
+#### Improvements
+- Documentation improvements
+- Enforce the seluser on selinux systems
+- All the relevent services are now autorequired by the firewall and firewallchain types
+- Replace Facter.fact().value() calls with Facter.value() to support Facter 3
+
+## 2015-05-19 - Supported Release 1.6.0
+### Summary
 
 This release includes support for TEE, MSS, the time ipt module, Debian 8 support, and a number of test fixes and other improvements.
 
-####Features
+#### Features
 - Add TEE support
 - Add MSS support (including clamp-mss-to-pmtu support)
 - Add support for the time ipt module (-m time)
@@ -13,35 +293,35 @@
 - Add support for new 'match_mark' property
 - Added 'ipv4' and 'ipv6' options to 'proto' property
 
-####Bugfixes
+#### Bugfixes
 - Fix for Systemd-based OSes where systemd needs restarted before being able to pick up new services (MODULES-1984)
 - Arch Linux package management fix
 
-##2015-03-31 - Supported Release 1.5.0
-###Summary
+## 2015-03-31 - Supported Release 1.5.0
+### Summary
 
 This release includes physdev_is_bridged support, checksum_fill support, basic Gentoo compatibility, and a number of test fixes and improvements.
 
-####Features
+#### Features
 - Add `physdev_is_bridged` support
 - Add `checksum_fill` support
 - Add basic Gentoo compatibility (unsupported)
 
-####Bugfixes
+#### Bugfixes
 - Implementation for resource map munging to allow a single ipt module to be used multiple times in a single rule on older versions of iptables (MODULES-1808)
 - Test fixes
 
-##2015-01-27 - Supported Release 1.4.0
-###Summary
+## 2015-01-27 - Supported Release 1.4.0
+### Summary
 
 This release includes physdev support, the ability to look up usernames from uuid, and a number of bugfixes
 
-####Features
+#### Features
 - Add `netmap` feature
 - Add `physdev` support
 - Add ability to look up username from uuid (MODULES-753, MODULES-1688)
 
-####Bugfixes
+#### Bugfixes
 - Sync iptables/ip6tables providers (MODULES-1612)
 - Fix package names for Amazon and Ubuntu 14.10 (MODULES-1029)
 - Fix overly aggressive gsub when `ensure => absent` (MODULES-1453)
@@ -49,27 +329,27 @@
 - Fix ip6tables provider when `iptables-ipv6` package isn't installed for EL6 (MODULES-633)
 - Test fixes
 
-##2014-12-16 - Supported Release 1.3.0
-###Summary
+## 2014-12-16 - Supported Release 1.3.0
+### Summary
 
 This release includes a number of bugfixes and features, including fixing `tcp_flags` support, and added support for interface aliases, negation for iniface and outiface, and extra configurability for packages and service names.
 
-####Features
+#### Features
 - Add support for interface aliases (eth0:0) (MODULES-1469)
 - Add negation for iniface, outiface (MODULES-1470)
 - Make package and service names configurable (MODULES-1309)
 
-####Bugfixes
+#### Bugfixes
 - Fix test regexes for EL5 (MODULES-1565)
 - Fix `tcp_flags` support for ip6tables (MODULES-556)
 - Don't arbitrarily limit `set_mark` for certain chains
 
-##2014-11-04 - Supported Release 1.2.0
-###Summary
+## 2014-11-04 - Supported Release 1.2.0
+### Summary
 
 This release has a number of new features and bugfixes, including rule inversion, future parser support, improved EL7 support, and the ability to purge ip6tables rules.
 
-####Features
+#### Features
 - Documentation updates!
 - Test updates!
 - Add ipset support
@@ -81,33 +361,33 @@
 - Add support for mac address source rules
 - Add cbt protocol
 
-####Bugfixes
+#### Bugfixes
 - Incorrect use of `source => :iptables` in the ip6tables provider was making it impossible to purge ip6tables rules (MODULES-41)
 - Don't require `toports` when `jump => 'REDIRECT'` (MODULES-1086)
 - Don't limit which chains iniface and outiface parameters can be used in
 - Don't fail on rules added with ipsec/strongswan (MODULES-796)
 
-##2014-07-08 - Supported Release 1.1.3
-###Summary
+## 2014-07-08 - Supported Release 1.1.3
+### Summary
 This is a supported release with test coverage enhancements.
 
-####Bugfixes
+#### Bugfixes
 - Confine to supported kernels
 
-##2014-06-04 - Release 1.1.2
-###Summary
+## 2014-06-04 - Release 1.1.2
+### Summary
 
 This is a release of the code previously released as 1.1.1, with updated metadata.
 
 ## 2014-05-16 Release 1.1.1
-###Summary
+### Summary
 
 This release reverts the alphabetical ordering of 1.1.0.  We found this caused
 a regression in the Openstack modules so in the interest of safety we have
 removed this for now.
 
 ## 2014-05-13 Release 1.1.0
-###Summary
+### Summary
 
 This release has a significant change from previous releases; we now apply the
 firewall resources alphabetically by default, removing the need to create pre
@@ -121,13 +401,13 @@
 release has been validated against Ubuntu 14.04 and RHEL7 and should be fully
 working on those platforms.
 
-####Features
+#### Features
 
-- Apply firewall resources alphabetically. 
+- Apply firewall resources alphabetically.
 - Add support for connlimit and connmark.
 - Add `mask` as a parameter. (Used exclusively with the recent parameter).
 
-####Bugfixes
+#### Bugfixes
 
 - Add systemd support for RHEL7.
 - Replace &&'s with the correct and in manifests.
@@ -136,38 +416,38 @@
 - Fix boolean flag tests.
 - Fix DNAT->SNAT typo in an error message.
 
-####Known Bugs
+#### Known Bugs
 
 * For Oracle, the `owner` and `socket` parameters require a workaround to function. Please see the Limitations section of the README.
 
 
 ## 2014-03-04 Supported Release 1.0.2
-###Summary
+### Summary
 
 This is a supported release.  This release removes a testing symlink that can
 cause trouble on systems where /var is on a seperate filesystem from the
 modulepath.
 
-####Features
-####Bugfixes
-####Known Bugs
+#### Features
+#### Bugfixes
+#### Known Bugs
 
 * For Oracle, the `owner` and `socket` parameters require a workaround to function. Please see the Limitations section of the README.
 
 ### Supported release - 2014-03-04 1.0.1
 
-####Summary
+#### Summary
 
 An important bugfix was made to the offset calculation for unmanaged rules
 to handle rules with 9000+ in the name.
 
-####Features
+#### Features
 
-####Bugfixes
+#### Bugfixes
 - Offset calculations assumed unmanaged rules were numbered 9000+.
 - Gracefully fail to manage ip6tables on iptables 1.3.x
 
-####Known Bugs
+#### Known Bugs
 
 * For Oracle, the `owner` and `socket` parameters require a workaround to function. Please see the Limitations section of the README.
 
@@ -531,3 +811,9 @@
 * (#9576) Stub provider so it works properly outside of Linux
 * (#9576) Align spec framework with Puppet core
 * and lots of other earlier development tasks ...
+
+
+\* *This Changelog was automatically generated by [github_changelog_generator](https://github.com/skywinder/Github-Changelog-Generator)*
+
+
+\* *This Changelog was automatically generated by [github_changelog_generator](https://github.com/skywinder/Github-Changelog-Generator)*