The following commands have a timeout in them:
[--permanent] [--zone=zone] [--permanent] [--policy=policy] --add-icmp-block=icmptype [--timeout=timeval]
Add an ICMP block for icmptype. This option can be specified multiple times. If a timeout is supplied, the rule will be active for the specified
amount of time and will be removed automatically afterwards. timeval is either a number (of seconds) or number followed by one of characters s
(seconds), m (minutes), h (hours), for example 20m or 1h.
[--permanent] [--zone=zone] [--permanent] [--policy=policy] --add-masquerade [--timeout=timeval]
Enable IPv4 masquerade. If a timeout is supplied, masquerading will be active for the specified amount of time. timeval is either a number (of
seconds) or number followed by one of characters s (seconds), m (minutes), h (hours), for example 20m or 1h.
etc.
However, when I look at zone/policy/rul XML structure, there is no timeout on any of the corresponding elements. So, what timeout is that, and what does it apply to?