# The mesh: stopping the stock unit deletes only the mesh's table, never the whole ruleset # (novox/hq ADR 0100) — a flush would take the container runtime's rules and any firewall with it. [Service] ExecStop= ExecStop=nft delete table inet mesh