ufw inside rootless podman container "Permission denied (you must be root)"

https://blog.jarrousse.org/2023/03/18/how-to-use-ufw-firewall-with-docker-containers/
    https://stackoverflow.com/questions/30383845/what-is-the-best-practice-of-docker-ufw-under-ubuntu
        https://vpetersson.com/2014/11/03/the-dangers-of-ufw-docker.html
        https://www.mkubaczyk.com/2017/09/05/force-docker-not-bypass-ufw-rules-ubuntu-16-04/
https://github.com/chaifeng/ufw-docker
https://github.com/chaifeng/ufw-docker/blob/master/ufw-docker

https://github.com/containers/podman/discussions/22982
    modprobe: FATAL: Module nf_conntrack_ftp not found in directory /lib/modules/6.12.11-200.fc41.x86_64
    nf_nat_ftp, nf_conntrack_netbios_ns
    ufw-init: iptables-restore v1.8.10 (nf_tables): Could not fetch rule set generation id: Permission denied (you must be root)
    ufw-init: sysctl: permission denied on key "net.ipv4.conf.default.rp_filter"
https://github.com/haugene/docker-transmission-openvpn/issues/328
    --privileged
    --sysctl net.ipv6.conf.all.disable_ipv6=0
    --net=host (not)
    --cap-add=NET_ADMIN

ideas to fix
https://github.com/containers/podman/issues/8784
    --cap-add=all
    --cap-add=NET_ADMIN,NET_RAW
https://www.procustodibus.com/blog/2022/10/wireguard-in-podman/
    --cap-add NET_ADMIN \
    --cap-add NET_RAW \
    --sysctl net.ipv4.conf.all.forwarding=1 \

ufw-init[1055]: modprobe: ERROR: could not insert 'ip_tables': Operation not permitted
sudo modprobe ip_tables (both host/guest)
Feb 15 22:18:06 EPBYGOMW0024T5 ufw-init[857]: modprobe: ERROR: could not insert 'nf_conntrack_ftp': Operation not permitted
Feb 15 22:18:06 EPBYGOMW0024T5 ufw-init[858]: modprobe: ERROR: could not insert 'nf_nat_ftp': Operation not permitted
Feb 15 22:18:06 EPBYGOMW0024T5 ufw-init[859]: modprobe: ERROR: could not insert 'nf_conntrack_netbios_ns': Operation not permitted