From the firewalld documentation, it is totally unclear to me what an entry is. I gather from man ipset(8)
that it is somehow connected with options, but the nature of the relationship is unclear. I gather that options can be:
timeout
counters
packets
bytes
comment
skbinfo
skbmark
skbprio
skbqueue
hashsize
maxelem
bucketsize
family inet/inet6 (though firewall-cmd keeps it separately)
nomatch
forceadd
wildcard
So, what can entries be and what do they signify?