we don't have anything yet to create or populate the sets
because it's empty, these are input rules for the local machine
this makes it possible to open ports on the router itself
a firewall with no configuration will get a relatively sane ruleset. a firewall with `extraRules` will get them deep merged into the default rules. Specifying `rules` will override the defaults
