Add configuration option for iptables_chain

[brwyatt]

iptables is already pretty fiddly on its own. Allowing a user to select a custom chain for Fail2Ban to manage (instead of INPUT) will make this management quite a bit less headache-inducing.

This change doesn't manage the chain, just instructs Fail2Ban to use it, via the config file.

[bastelfreak]

Hi @brwyatt, thanks for the PR. This repo got recently migrated to Vox Pupuli. Can you please rebase?

[brwyatt]

@bastelfreak Should be good now! Let me know if you need any further assistance to get this merged in.

Thanks!

[brwyatt]

Noticed the new updates to master. I've rebased again accordingly.

[bastelfreak]

Hi @brwyatt, thanks for the rebase! Can you add at least one rspec test to verify the file content?

[brwyatt]

I've added in some tests to make sure the line is present (default of "INPUT" when using the templates), and additionally checking when the parameter is changed that it appears when using a template.

I'm hoping this is sufficient and what you were looking for. Feel free to point out if I've missed anything and I'll try to get things sorted out.

[brwyatt]

Hey @bastelfreak Saw the updates on master and have rebased on those changes. Also noticed the added template for stretch and have updated the tests to make sure it will cover all the template versions for all supported os versions (rather than defaulting to wheezy as some of the other tests do, but they aren't testing for template content), and have also added in an update to the README to include the iptables_chain parameter.

Let me know if you need anything else from me to before this can be merged.

[bastelfreak]

acceptance tests \o/

[bastelfreak]

datatypes \o/

[bastelfreak]

Thanks for the updates @brwyatt !