Fix for https://bugs.centos.org/view.php?id=16425

fix: Revert "ebtables: drop support for broute table"

backport fix to allow disabling IPv6

backport recent upstream stable fixes
backport fix to enable IP forwarding only if toaddr specified

rebase package to v0.6.3, include recent stable fixes
use QT4 patch for firewall-applet
remove cockpit service definition, cockpit package still ships their own
remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
remove nftables support

even if startup failed, reapply non-permanent interface to zone assignments

backport patches to enter failed state if startup fails

backport patches to avoid NM for generated connections

backport patches for --check-config option

rebase package to v0.5.3

services/high-availability: Add port 9929 (RHBZ#1486143)

firewalld: also reload dbus config interface for global options

Fix and improve firewalld-sysctls.conf (RHBZ#1516881)

core: Log unsupported ICMP types as informational only (RHBZ#1479951)
doc: firewall-cmd: Document quirk in --reload option (RHBZ#1452137)
firewall-cmd: Use colors only if output is a TTY (RHBZ#1368544)
firewall-offline-cmd: Don't require root for help output (RHBZ#1445214)

Add missing ports to RH-Satellite-6 service (RHBZ#1422149)

Reload nf_conntrack sysctls after the module is loaded (RHBZ#1462977)