type:SERVICE_STOP (unit:firewalld OR unit:iptables OR unit:ufw)