Vendor the external cookbooks

Knife-Zero doesn't include Berkshelf support, so vendoring everything in
the repo is convenient again

cookbooks/firewall/libraries/resource_firewall.rb

@@ -0,0 +1,26 @@
+class Chef
+  class Resource::Firewall < Chef::Resource::LWRPBase
+    resource_name(:firewall)
+    provides(:firewall)
+    actions(:install, :restart, :disable, :flush, :save)
+    default_action(:install)
+
+    # allow both kinds of logic -- eventually remove the :disabled one.
+    # the positive logic is much easier to follow.
+    attribute(:disabled, kind_of: [TrueClass, FalseClass], default: false)
+    attribute(:enabled, kind_of: [TrueClass, FalseClass], default: true)
+
+    attribute(:log_level, kind_of: Symbol, equal_to: [:low, :medium, :high, :full, :off], default: :low)
+    attribute(:rules, kind_of: Hash)
+
+    # for firewalld, specify the zone when firewall is disable and enabled
+    attribute(:disabled_zone, kind_of: Symbol, default: :public)
+    attribute(:enabled_zone, kind_of: Symbol, default: :drop)
+
+    # for firewall implementations where ipv6 can be skipped (currently iptables-specific)
+    attribute(:ipv6_enabled, kind_of: [TrueClass, FalseClass], default: true)
+
+    # allow override of package options for firewalld package
+    attribute(:package_options, kind_of: String, default: nil)
+  end
+end