doc: clarify --set-target values "default" vs "reject"

fix(zone): cache rule_str for rich rules

feat(service): add RH-Satellite-6-Capsule

fix: add logrotate policy
fix: checkIP6: strip leading/trailing square brackets

fix: firewalld not falling back to interface zone

fix: failure to load modules no longer fatal

fix: Revert "ebtables: drop support for broute table"

fix: direct: removeRules() not removing all rules in chain

doc: add --default-config and --system-config

fix: guarantee zone source dispatch is sorted by zone name

backport recent upstream stable fixes
backport fix --remove-rules deleting all direct rules
backport fix unable to delete rich rule forward-port
backport fix forward-port for external zone hijacking internal zone
backport fix testsuite iptables locking

backport recent upstream stable fixes
backport fix to enable IP forwarding only if toaddr specified

rebase package to v0.6.3, include recent stable fixes
use QT4 patch for firewall-applet
remove cockpit service definition, cockpit package still ships their own
remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
remove nftables support

even if startup failed, reapply non-permanent interface to zone assignments

backport patches to enter failed state if startup fails

backport patches to avoid NM for generated connections