Add logging rules right before reject and drop rules in the INPUT, FORWARD and OUTPUT chains for the default rules and also final reject and drop rules in zones for the configured link-layer packet type.

Whether to flush all runtime rules on a reload.

Whether to clean up firewall rules when firewalld stops.

If enabled, the generated nftables rule set will be owned exclusively by firewalld

The firewall backend implementation

If enabled, the generated destination NAT (DNAT) rules will NOT accept traffic that was DNAT'd by other entities, e.g. docker