Allow --reject-with tcp-reset for TCP rules

[chrisongthb]

Describe the Bug

When defining a TCP rule, one may want to use --reject-with tcp-reset. This is not possible in the current Version of this module v7.0.2.

Expected Behavior

The module should per-se accept 'tcp-reset' next to 'icmp(6)-net-unreachable', 'icmp(6)-host-unreachable', 'adm-prohibited' and the others. Further more the module should contain a parameter validation: 'tcp-reset' makes only sense, if proto is set to 'tcp'. If that does not match, a helpful error message should be printed on the agent side.

Steps to Reproduce

firewall { '998 reject forward tcp traffic with reset':
  chain  => 'FORWARD',
  proto  => 'tcp',
  jump   => 'reject',
  reject => 'tcp-reset',
}

Environment

• Module version v7.0.2
• Puppet Agent version 7.26.0
• Puppet Server version 7.13.0
• Platform Ubuntu 20.04, 22.04