[PATCH v3 3/6] firewall: Add explicit feature API