From adreanos in github:
To support setups with existing firewalls, to avoid conflicts with existing firewalls, to be able to use bitmask inside Whonix, an option to not apply bitmask's firewall rules would be useful.